type=LOGIN msg=audit(1773995744.461:24984): pid=206907 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=38 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995744.461:24984): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff9672fc60 a2=1 a3=0 items=0 ppid=38931 pid=206907 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=38 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995744.461:24984): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995744.463:24985): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995744.497:24986): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995744.499:24987): pid=206913 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995744.500:24988): pid=206913 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995744.547:24989): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995744.547:24990): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995744.550:24991): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206922 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995744.617:24992): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995744.617:24993): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995744.619:24994): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995744.623:24995): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995744.636:24996): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995744.636:24997): pid=206922 uid=0 auid=0 ses=38 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995744.638:24998): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206913 suid=0 rport=51938 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995744.639:24999): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995744.644:25000): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995744.645:25001): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995744.646:25002): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995744.646:25003): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995744.646:25004): pid=206907 uid=0 auid=0 ses=38 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.373:25005): pid=206958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995745.374:25006): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206958 suid=74 rport=51940 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995745.375:25007): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=206958 suid=74 rport=51940 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995745.460:25008): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995745.460:25009): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995745.491:25010): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995745.491:25011): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206958 suid=74 rport=51940 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995745.494:25012): pid=206957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995745.494:25013): pid=206957 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=39 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995745.494:25013): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff48e34c60 a2=1 a3=0 items=0 ppid=38931 pid=206957 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=39 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995745.494:25013): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995745.495:25014): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995745.521:25015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995745.535:25016): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.536:25017): pid=206964 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995745.538:25018): pid=206964 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995745.581:25019): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995745.581:25020): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.585:25021): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206981 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995745.666:25022): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995745.666:25023): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995745.667:25024): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995745.672:25025): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995745.685:25026): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995745.685:25027): pid=206981 uid=0 auid=0 ses=39 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.688:25028): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=206964 suid=0 rport=51940 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.688:25029): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995745.691:25030): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995745.692:25031): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995745.692:25032): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995745.692:25033): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995745.692:25034): pid=206957 uid=0 auid=0 ses=39 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=206957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995746.087:25035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995746.412:25036): pid=207027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995746.413:25037): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207027 suid=74 rport=51954 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995746.413:25038): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207027 suid=74 rport=51954 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995746.499:25039): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995746.499:25040): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995746.528:25041): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995746.528:25042): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207027 suid=74 rport=51954 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995746.530:25043): pid=207026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995746.531:25044): pid=207026 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=40 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995746.531:25044): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff9fb94c00 a2=1 a3=0 items=0 ppid=38931 pid=207026 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=40 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995746.531:25044): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995746.532:25045): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995746.569:25046): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995746.570:25047): pid=207029 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995746.572:25048): pid=207029 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995746.616:25049): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995746.616:25050): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995746.618:25051): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995746.696:25052): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995746.696:25053): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995746.697:25054): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995746.702:25055): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995746.720:25056): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995746.720:25057): pid=207038 uid=0 auid=0 ses=40 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995746.723:25058): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207029 suid=0 rport=51954 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995746.724:25059): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995746.726:25060): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995746.726:25061): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995746.727:25062): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995746.727:25063): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995746.727:25064): pid=207026 uid=0 auid=0 ses=40 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.432:25065): pid=207106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995747.433:25066): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207106 suid=74 rport=40618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995747.433:25067): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207106 suid=74 rport=40618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995747.525:25068): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995747.525:25069): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995747.559:25070): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995747.559:25071): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207106 suid=74 rport=40618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995747.561:25072): pid=207105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995747.561:25073): pid=207105 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=41 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995747.561:25073): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc77eb6c60 a2=1 a3=0 items=0 ppid=38931 pid=207105 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=41 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995747.561:25073): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995747.563:25074): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995747.588:25075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.592:25076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.597:25077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.601:25078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.605:25079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.628:25080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.634:25081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.643:25082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995747.652:25083): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.654:25084): pid=207222 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995747.656:25085): pid=207222 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995747.703:25086): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995747.703:25087): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.705:25088): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207256 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995747.717:25089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995747.720:25090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995747.768:25091): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995747.768:25092): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995747.769:25093): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995747.774:25094): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995747.784:25095): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995747.784:25096): pid=207256 uid=0 auid=0 ses=41 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.787:25097): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207222 suid=0 rport=40618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.787:25098): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207222 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995747.789:25099): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995747.789:25100): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995747.790:25101): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995747.790:25102): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995747.790:25103): pid=207105 uid=0 auid=0 ses=41 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995747.806:25104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995747.830:25105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995747.915:25106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995747.967:25107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995747.979:25108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995748.019:25109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995748.088:25110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995748.089:25111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995748.092:25112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995748.100:25113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995748.156:25114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995748.398:25115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995748.403:25116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995748.451:25117): pid=207497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995748.452:25118): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207497 suid=74 rport=40626 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995748.452:25119): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207497 suid=74 rport=40626 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773995748.537:25120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773995748.540:25121): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995748.540:25122): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995748.558:25123): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995748.558:25124): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207497 suid=74 rport=40626 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995748.560:25125): pid=207482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995748.561:25126): pid=207482 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=42 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995748.561:25126): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe065876f0 a2=1 a3=0 items=0 ppid=38931 pid=207482 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=42 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995748.561:25126): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995748.562:25127): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995748.591:25128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995748.597:25129): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995748.599:25130): pid=207535 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995748.599:25131): pid=207535 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995748.642:25132): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995748.642:25133): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995748.645:25134): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995748.697:25135): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995748.697:25136): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995748.698:25137): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995748.702:25138): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995748.712:25139): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995748.712:25140): pid=207545 uid=0 auid=0 ses=42 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995748.714:25141): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207535 suid=0 rport=40626 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995748.714:25142): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995748.716:25143): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995748.717:25144): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995748.717:25145): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995748.717:25146): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995748.717:25147): pid=207482 uid=0 auid=0 ses=42 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995748.742:25148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995749.402:25149): pid=207580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995749.403:25150): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207580 suid=74 rport=40636 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995749.403:25151): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207580 suid=74 rport=40636 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995749.492:25152): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995749.492:25153): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995749.513:25154): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995749.513:25155): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207580 suid=74 rport=40636 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995749.515:25156): pid=207579 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995749.515:25157): pid=207579 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=43 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995749.515:25157): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdbf635280 a2=1 a3=0 items=0 ppid=38931 pid=207579 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=43 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995749.515:25157): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995749.517:25158): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995749.543:25159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995749.561:25160): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995749.563:25161): pid=207589 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995749.565:25162): pid=207589 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995749.609:25163): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995749.609:25164): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995749.613:25165): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995749.664:25166): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995749.664:25167): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995749.665:25168): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995749.670:25169): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995749.682:25170): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995749.683:25171): pid=207597 uid=0 auid=0 ses=43 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995749.685:25172): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207589 suid=0 rport=40636 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995749.686:25173): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207589 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995749.690:25174): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995749.690:25175): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995749.691:25176): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995749.691:25177): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995749.691:25178): pid=207579 uid=0 auid=0 ses=43 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207579 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995750.108:25179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995750.371:25180): pid=207695 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995750.373:25181): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207695 suid=74 rport=40652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995750.373:25182): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207695 suid=74 rport=40652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995750.453:25183): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995750.453:25184): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995750.477:25185): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995750.477:25186): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207695 suid=74 rport=40652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995750.480:25187): pid=207694 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995750.480:25188): pid=207694 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=44 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995750.480:25188): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff45bf7a80 a2=1 a3=0 items=0 ppid=38931 pid=207694 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=44 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995750.480:25188): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995750.482:25189): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995750.519:25190): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995750.521:25191): pid=207697 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995750.523:25192): pid=207697 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995750.566:25193): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995750.566:25194): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995750.569:25195): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995750.648:25196): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995750.648:25197): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995750.650:25198): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995750.655:25199): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995750.672:25200): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995750.672:25201): pid=207698 uid=0 auid=0 ses=44 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995750.675:25202): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207697 suid=0 rport=40652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995750.675:25203): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995750.678:25204): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995750.678:25205): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995750.679:25206): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995750.679:25207): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995750.679:25208): pid=207694 uid=0 auid=0 ses=44 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.324:25209): pid=207738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995751.326:25210): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207738 suid=74 rport=40654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995751.326:25211): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207738 suid=74 rport=40654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995751.422:25212): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995751.422:25213): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995751.452:25214): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995751.453:25215): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207738 suid=74 rport=40654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995751.455:25216): pid=207737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995751.456:25217): pid=207737 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=45 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995751.456:25217): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd06a145a0 a2=1 a3=0 items=0 ppid=38931 pid=207737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=45 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995751.456:25217): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995751.457:25218): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995751.491:25219): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.492:25220): pid=207740 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995751.494:25221): pid=207740 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995751.538:25222): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995751.538:25223): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.539:25224): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995751.606:25225): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995751.606:25226): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995751.608:25227): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995751.612:25228): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995751.626:25229): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995751.626:25230): pid=207741 uid=0 auid=0 ses=45 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.629:25231): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207740 suid=0 rport=40654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.629:25232): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995751.632:25233): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995751.633:25234): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995751.634:25235): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995751.634:25236): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995751.634:25237): pid=207737 uid=0 auid=0 ses=45 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.330:25238): pid=207781 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207781 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995752.332:25239): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207781 suid=74 rport=40668 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995752.332:25240): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207781 suid=74 rport=40668 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995752.430:25241): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995752.430:25242): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995752.459:25243): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995752.459:25244): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207781 suid=74 rport=40668 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995752.462:25245): pid=207780 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995752.462:25246): pid=207780 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=46 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995752.462:25246): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd2e657d0 a2=1 a3=0 items=0 ppid=38931 pid=207780 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=46 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995752.462:25246): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995752.464:25247): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995752.505:25248): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.507:25249): pid=207783 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995752.509:25250): pid=207783 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995752.553:25251): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995752.554:25252): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.557:25253): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995752.618:25254): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995752.619:25255): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995752.620:25256): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995752.626:25257): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995752.640:25258): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995752.640:25259): pid=207784 uid=0 auid=0 ses=46 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.643:25260): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207783 suid=0 rport=40668 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.644:25261): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995752.647:25262): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995752.647:25263): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995752.648:25264): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995752.648:25265): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995752.648:25266): pid=207780 uid=0 auid=0 ses=46 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207780 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995753.930:25267): pid=207847 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207847 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995753.932:25268): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207847 suid=74 rport=40670 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995753.932:25269): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207847 suid=74 rport=40670 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995754.026:25270): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995754.026:25271): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995754.058:25272): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995754.059:25273): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207847 suid=74 rport=40670 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995754.061:25274): pid=207843 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995754.061:25275): pid=207843 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=47 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995754.061:25275): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda3d73920 a2=1 a3=0 items=0 ppid=38931 pid=207843 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=47 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995754.061:25275): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995754.062:25276): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995754.088:25277): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.090:25278): pid=207852 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995754.091:25279): pid=207852 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995754.134:25280): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995754.135:25281): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.136:25282): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995754.198:25283): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995754.198:25284): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995754.201:25285): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995754.206:25286): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995754.222:25287): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995754.222:25288): pid=207853 uid=0 auid=0 ses=47 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.225:25289): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207852 suid=0 rport=40670 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.226:25290): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995754.228:25291): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995754.229:25292): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995754.230:25293): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995754.230:25294): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.230:25295): pid=207843 uid=0 auid=0 ses=47 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.258:25296): pid=207869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995754.259:25297): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207869 suid=74 rport=40678 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995754.260:25298): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=207869 suid=74 rport=40678 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995754.351:25299): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995754.351:25300): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995754.381:25301): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995754.381:25302): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207869 suid=74 rport=40678 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995754.384:25303): pid=207868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995754.384:25304): pid=207868 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=48 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995754.384:25304): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1a051020 a2=1 a3=0 items=0 ppid=38931 pid=207868 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=48 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995754.384:25304): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995754.386:25305): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995754.406:25306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995754.410:25307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995754.433:25308): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.435:25309): pid=207883 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995754.436:25310): pid=207883 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995754.479:25311): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995754.479:25312): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995754.482:25313): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995754.552:25314): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995754.554:25315): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995754.555:25316): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995754.558:25317): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995754.592:25318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995754.670:25319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995754.848:25320): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995755.085:25321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_horizon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995755.088:25322): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995755.088:25323): pid=207896 uid=0 auid=0 ses=48 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995755.093:25324): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=207883 suid=0 rport=40678 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995755.093:25325): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995755.097:25326): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995755.097:25327): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995755.098:25328): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995755.098:25329): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995755.098:25330): pid=207868 uid=0 auid=0 ses=48 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=207868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.254:25331): pid=208456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995760.255:25332): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208456 suid=74 rport=34618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995760.256:25333): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208456 suid=74 rport=34618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995760.353:25334): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995760.353:25335): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995760.386:25336): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995760.386:25337): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208456 suid=74 rport=34618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995760.389:25338): pid=208455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995760.389:25339): pid=208455 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=49 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995760.389:25339): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc76e34a0 a2=1 a3=0 items=0 ppid=38931 pid=208455 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=49 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995760.389:25339): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995760.391:25340): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995760.430:25341): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.432:25342): pid=208458 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995760.434:25343): pid=208458 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995760.478:25344): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995760.478:25345): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.483:25346): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995760.560:25347): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995760.561:25348): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995760.563:25349): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995760.568:25350): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995760.585:25351): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995760.586:25352): pid=208459 uid=0 auid=0 ses=49 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.591:25353): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208458 suid=0 rport=34618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.591:25354): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995760.594:25355): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995760.595:25356): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995760.596:25357): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995760.596:25358): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.596:25359): pid=208455 uid=0 auid=0 ses=49 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.622:25360): pid=208475 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208475 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995760.624:25361): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208475 suid=74 rport=34624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995760.625:25362): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208475 suid=74 rport=34624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995760.715:25363): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995760.715:25364): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995760.748:25365): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995760.748:25366): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208475 suid=74 rport=34624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995760.751:25367): pid=208474 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995760.751:25368): pid=208474 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=50 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995760.751:25368): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef5780720 a2=1 a3=0 items=0 ppid=38931 pid=208474 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=50 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995760.751:25368): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995760.753:25369): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995760.787:25370): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.789:25371): pid=208477 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995760.790:25372): pid=208477 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995760.833:25373): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995760.834:25374): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995760.835:25375): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995760.903:25376): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995760.903:25377): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995760.903:25378): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995760.908:25379): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995764.166:25380): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995764.408:25381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_keystone comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995764.412:25382): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995764.413:25383): pid=208478 uid=0 auid=0 ses=50 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995764.418:25384): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208477 suid=0 rport=34624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995764.419:25385): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995764.423:25386): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995764.423:25387): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995764.424:25388): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995764.424:25389): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995764.424:25390): pid=208474 uid=0 auid=0 ses=50 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.073:25391): pid=208956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208956 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995769.075:25392): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208956 suid=74 rport=50140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995769.075:25393): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=208956 suid=74 rport=50140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995769.155:25394): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995769.155:25395): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995769.186:25396): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995769.186:25397): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208956 suid=74 rport=50140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995769.189:25398): pid=208955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995769.189:25399): pid=208955 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=51 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995769.189:25399): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe59b664c0 a2=1 a3=0 items=0 ppid=38931 pid=208955 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=51 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995769.189:25399): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995769.192:25400): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995769.239:25401): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.241:25402): pid=208962 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995769.243:25403): pid=208962 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995769.287:25404): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995769.287:25405): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.291:25406): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995769.356:25407): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995769.356:25408): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995769.358:25409): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995769.361:25410): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995769.381:25411): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995769.381:25412): pid=208967 uid=0 auid=0 ses=51 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.385:25413): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=208962 suid=0 rport=50140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.385:25414): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995769.388:25415): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995769.389:25416): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995769.390:25417): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995769.390:25418): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995769.390:25419): pid=208955 uid=0 auid=0 ses=51 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=208955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.080:25420): pid=209040 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995770.082:25421): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209040 suid=74 rport=50150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995770.082:25422): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209040 suid=74 rport=50150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995770.161:25423): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995770.161:25424): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995770.184:25425): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995770.185:25426): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209040 suid=74 rport=50150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995770.189:25427): pid=209039 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995770.189:25428): pid=209039 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=52 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995770.189:25428): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe69b18170 a2=1 a3=0 items=0 ppid=38931 pid=209039 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=52 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995770.189:25428): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995770.191:25429): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995770.214:25430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.218:25431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.222:25432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.228:25433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.233:25434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.237:25435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.244:25436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995770.276:25437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995770.283:25438): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.285:25439): pid=209105 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995770.286:25440): pid=209105 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995770.330:25441): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995770.330:25442): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.333:25443): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995770.397:25444): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995770.397:25445): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995770.399:25446): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995770.405:25447): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995770.418:25448): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995770.418:25449): pid=209128 uid=0 auid=0 ses=52 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.424:25450): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209105 suid=0 rport=50150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.425:25451): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995770.428:25452): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995770.428:25453): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995770.428:25454): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995770.428:25455): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995770.429:25456): pid=209039 uid=0 auid=0 ses=52 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209039 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995770.517:25457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.535:25458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.599:25459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.614:25460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.666:25461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.713:25462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.770:25463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995770.800:25464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995771.087:25465): pid=209300 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209300 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995771.089:25466): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209300 suid=74 rport=50166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995771.089:25467): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209300 suid=74 rport=50166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995771.169:25468): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995771.169:25469): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995771.194:25470): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995771.195:25471): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209300 suid=74 rport=50166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995771.197:25472): pid=209299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995771.198:25473): pid=209299 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=53 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995771.198:25473): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe62b7680 a2=1 a3=0 items=0 ppid=38931 pid=209299 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=53 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995771.198:25473): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995771.200:25474): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995771.237:25475): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995771.239:25476): pid=209302 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995771.241:25477): pid=209302 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995771.285:25478): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995771.285:25479): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995771.287:25480): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995771.364:25481): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995771.364:25482): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995771.367:25483): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995771.374:25484): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995771.395:25485): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995771.396:25486): pid=209304 uid=0 auid=0 ses=53 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995771.399:25487): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209302 suid=0 rport=50166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995771.400:25488): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995771.403:25489): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995771.404:25490): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995771.405:25491): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995771.405:25492): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995771.406:25493): pid=209299 uid=0 auid=0 ses=53 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995774.641:25494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.648:25495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.653:25496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.658:25497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.663:25498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.668:25499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.671:25500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.674:25501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a0e98277ca781a82b132d8612808a50d456db43f05d17f7f68c2041c08ca1192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.677:25502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.681:25503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.683:25504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.686:25505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995774.688:25506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995774.986:25507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.000:25508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.051:25509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.107:25510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.172:25511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.225:25512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.236:25513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a0e98277ca781a82b132d8612808a50d456db43f05d17f7f68c2041c08ca1192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.270:25514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.395:25515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.411:25516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.455:25517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.483:25518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995775.507:25519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995775.837:25520): pid=209937 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209937 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995775.839:25521): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209937 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995775.839:25522): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209937 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995775.930:25523): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995775.930:25524): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995775.963:25525): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995775.963:25526): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209937 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995775.966:25527): pid=209936 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995775.966:25528): pid=209936 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=54 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995775.966:25528): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdb350f610 a2=1 a3=0 items=0 ppid=38931 pid=209936 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=54 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995775.966:25528): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995775.968:25529): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995776.004:25530): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.006:25531): pid=209939 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995776.011:25532): pid=209939 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995776.055:25533): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995776.055:25534): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.059:25535): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995776.135:25536): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995776.135:25537): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995776.137:25538): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995776.153:25539): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995776.172:25540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995776.179:25541): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995776.179:25542): pid=209940 uid=0 auid=0 ses=54 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.183:25543): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209939 suid=0 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.183:25544): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209939 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995776.186:25545): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995776.187:25546): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995776.188:25547): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995776.188:25548): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.188:25549): pid=209936 uid=0 auid=0 ses=54 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209936 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.214:25550): pid=209962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995776.216:25551): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209962 suid=74 rport=50188 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995776.216:25552): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=209962 suid=74 rport=50188 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995776.298:25553): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995776.298:25554): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995776.330:25555): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995776.331:25556): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209962 suid=74 rport=50188 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995776.334:25557): pid=209961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995776.334:25558): pid=209961 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=55 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995776.334:25558): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd03ced5e0 a2=1 a3=0 items=0 ppid=38931 pid=209961 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=55 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995776.334:25558): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995776.336:25559): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995776.385:25560): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.386:25561): pid=209979 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995776.388:25562): pid=209979 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995776.432:25563): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995776.432:25564): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995776.434:25565): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995776.505:25566): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995776.505:25567): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995776.506:25568): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995776.510:25569): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995776.795:25570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.633:25571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.638:25572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.643:25573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.649:25574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.673:25575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.681:25576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.687:25577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.694:25578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.701:25579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.705:25580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.710:25581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995778.808:25582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995778.926:25583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995778.946:25584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.072:25585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.103:25586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.106:25587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.120:25588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.154:25589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.165:25590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.174:25591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.218:25592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.240:25593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995779.304:25594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995779.775:25595): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995780.013:25596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995780.019:25597): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995780.019:25598): pid=209982 uid=0 auid=0 ses=55 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995780.023:25599): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=209979 suid=0 rport=50188 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995780.024:25600): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209979 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995780.027:25601): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995780.027:25602): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995780.028:25603): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995780.028:25604): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995780.028:25605): pid=209961 uid=0 auid=0 ses=55 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=209961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995780.629:25606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995781.207:25607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995784.628:25608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995784.707:25609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995784.760:25610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995784.949:25611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995785.019:25612): pid=210816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995785.021:25613): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=210816 suid=74 rport=57082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995785.021:25614): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=210816 suid=74 rport=57082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995785.111:25615): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995785.112:25616): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995785.145:25617): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995785.145:25618): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=210816 suid=74 rport=57082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995785.148:25619): pid=210815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995785.148:25620): pid=210815 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=56 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995785.148:25620): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5fa072c0 a2=1 a3=0 items=0 ppid=38931 pid=210815 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=56 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995785.148:25620): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995785.150:25621): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995785.185:25622): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.187:25623): pid=210820 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995785.188:25624): pid=210820 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995785.233:25625): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995785.233:25626): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.237:25627): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995785.307:25628): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995785.307:25629): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995785.308:25630): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995785.312:25631): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995785.326:25632): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995785.326:25633): pid=210821 uid=0 auid=0 ses=56 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.329:25634): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=210820 suid=0 rport=57082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.330:25635): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210820 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995785.331:25636): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995785.332:25637): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995785.332:25638): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995785.332:25639): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.333:25640): pid=210815 uid=0 auid=0 ses=56 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.358:25641): pid=210837 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210837 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995785.359:25642): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=210837 suid=74 rport=57086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995785.359:25643): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=210837 suid=74 rport=57086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995785.493:25644): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995785.493:25645): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995785.522:25646): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995785.522:25647): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=210837 suid=74 rport=57086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995785.525:25648): pid=210836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995785.525:25649): pid=210836 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=57 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995785.525:25649): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee90abb10 a2=1 a3=0 items=0 ppid=38931 pid=210836 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=57 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995785.525:25649): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995785.526:25650): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995785.553:25651): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.554:25652): pid=210839 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995785.555:25653): pid=210839 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995785.598:25654): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995785.598:25655): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.600:25656): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995785.654:25657): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995785.654:25658): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995785.655:25659): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995785.659:25660): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995785.771:25661): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995785.928:25662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995785.932:25663): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995785.932:25664): pid=210840 uid=0 auid=0 ses=57 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.935:25665): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=210839 suid=0 rport=57086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.936:25666): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995785.938:25667): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995785.938:25668): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995785.939:25669): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995785.939:25670): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995785.939:25671): pid=210836 uid=0 auid=0 ses=57 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=210836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.193:25672): pid=211381 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995790.197:25673): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=211381 suid=74 rport=41326 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995790.197:25674): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=211381 suid=74 rport=41326 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995790.285:25675): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995790.285:25676): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995790.318:25677): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995790.319:25678): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=211381 suid=74 rport=41326 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995790.321:25679): pid=211360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995790.321:25680): pid=211360 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=58 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995790.321:25680): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe1484cb10 a2=1 a3=0 items=0 ppid=38931 pid=211360 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=58 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995790.321:25680): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995790.323:25681): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995790.355:25682): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.357:25683): pid=211391 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995790.359:25684): pid=211391 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995790.403:25685): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995790.403:25686): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.407:25687): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995790.468:25688): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995790.469:25689): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995790.470:25690): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995790.473:25691): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995790.487:25692): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995790.487:25693): pid=211392 uid=0 auid=0 ses=58 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.489:25694): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=211391 suid=0 rport=41326 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.490:25695): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995790.492:25696): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995790.493:25697): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995790.494:25698): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995790.494:25699): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.494:25700): pid=211360 uid=0 auid=0 ses=58 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.517:25701): pid=211408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995790.519:25702): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=211408 suid=74 rport=41336 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995790.519:25703): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=211408 suid=74 rport=41336 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995790.596:25704): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995790.596:25705): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995790.617:25706): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995790.618:25707): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=211408 suid=74 rport=41336 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995790.620:25708): pid=211407 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995790.620:25709): pid=211407 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=59 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995790.620:25709): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5c31d350 a2=1 a3=0 items=0 ppid=38931 pid=211407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=59 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995790.620:25709): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995790.622:25710): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995790.653:25711): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.654:25712): pid=211410 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995790.655:25713): pid=211410 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995790.700:25714): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995790.700:25715): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995790.703:25716): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211411 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995790.770:25717): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995790.771:25718): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995790.772:25719): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995790.775:25720): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995798.090:25721): pid=211611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211611 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1773995800.625:25722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.627:25723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.631:25724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.634:25725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.753:25726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.813:25727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995800.817:25728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995800.839:25729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995800.926:25730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995800.986:25731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995801.015:25732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995801.088:25733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995801.142:25734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995801.168:25735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.385:25736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.392:25737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.399:25738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.405:25739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.412:25740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a0e98277ca781a82b132d8612808a50d456db43f05d17f7f68c2041c08ca1192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.417:25741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.423:25742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.427:25743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.438:25744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.442:25745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.532:25746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995805.534:25747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.752:25748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.786:25749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.800:25750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.840:25751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.859:25752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.888:25753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a0e98277ca781a82b132d8612808a50d456db43f05d17f7f68c2041c08ca1192 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.910:25754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.923:25755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.975:25756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995805.981:25757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995806.052:25758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995806.127:25759): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995806.276:25760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995806.361:25761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995806.370:25762): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995806.371:25763): pid=211411 uid=0 auid=0 ses=59 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995806.376:25764): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=211410 suid=0 rport=41336 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995806.376:25765): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211410 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995806.404:25766): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995806.405:25767): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995806.406:25768): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995806.406:25769): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995806.406:25770): pid=211407 uid=0 auid=0 ses=59 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=211407 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995807.625:25771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995808.288:25772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.634:25773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.638:25774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.641:25775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.646:25776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.651:25777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.657:25778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.663:25779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.669:25780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.676:25781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.680:25782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.684:25783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995809.688:25784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995809.967:25785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.013:25786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.059:25787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.120:25788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.179:25789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.212:25790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.266:25791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.297:25792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.323:25793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.381:25794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.395:25795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995810.502:25796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995811.623:25797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995812.211:25798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995814.934:25799): pid=213321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995814.936:25800): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213321 suid=74 rport=39228 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995814.936:25801): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213321 suid=74 rport=39228 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995815.029:25802): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995815.029:25803): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995815.061:25804): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995815.061:25805): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213321 suid=74 rport=39228 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995815.064:25806): pid=213320 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995815.064:25807): pid=213320 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=60 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995815.064:25807): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe2dfa6eb0 a2=1 a3=0 items=0 ppid=38931 pid=213320 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=60 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995815.064:25807): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995815.067:25808): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995815.094:25809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995815.099:25810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995815.124:25811): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995815.125:25812): pid=213335 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995815.128:25813): pid=213335 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995815.173:25814): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995815.173:25815): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995815.179:25816): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213347 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995815.256:25817): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995815.257:25818): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995815.259:25819): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995815.275:25820): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995815.289:25821): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995815.289:25822): pid=213347 uid=0 auid=0 ses=60 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995815.293:25823): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213335 suid=0 rport=39228 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995815.294:25824): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995815.297:25825): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995815.298:25826): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995815.299:25827): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995815.299:25828): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995815.299:25829): pid=213320 uid=0 auid=0 ses=60 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995815.310:25830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995815.358:25831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995815.985:25832): pid=213471 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995815.987:25833): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213471 suid=74 rport=39242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995815.987:25834): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213471 suid=74 rport=39242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995816.089:25835): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995816.089:25836): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995816.120:25837): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995816.121:25838): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213471 suid=74 rport=39242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995816.123:25839): pid=213470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995816.124:25840): pid=213470 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=61 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995816.124:25840): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc43c45460 a2=1 a3=0 items=0 ppid=38931 pid=213470 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=61 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995816.124:25840): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995816.126:25841): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995816.161:25842): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995816.163:25843): pid=213473 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995816.164:25844): pid=213473 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995816.209:25845): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995816.209:25846): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995816.214:25847): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213474 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995816.290:25848): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995816.291:25849): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995816.292:25850): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995816.297:25851): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995816.313:25852): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995816.314:25853): pid=213474 uid=0 auid=0 ses=61 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995816.317:25854): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213473 suid=0 rport=39242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995816.318:25855): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213473 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995816.321:25856): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995816.322:25857): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995816.324:25858): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995816.324:25859): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995816.324:25860): pid=213470 uid=0 auid=0 ses=61 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.030:25861): pid=213599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995818.031:25862): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213599 suid=74 rport=60858 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995818.031:25863): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213599 suid=74 rport=60858 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995818.116:25864): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995818.116:25865): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995818.134:25866): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995818.134:25867): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213599 suid=74 rport=60858 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995818.136:25868): pid=213598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995818.137:25869): pid=213598 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=62 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995818.137:25869): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8b8d6610 a2=1 a3=0 items=0 ppid=38931 pid=213598 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=62 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995818.137:25869): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995818.138:25870): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995818.171:25871): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.173:25872): pid=213605 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995818.174:25873): pid=213605 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995818.217:25874): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995818.217:25875): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.219:25876): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213609 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995818.291:25877): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995818.292:25878): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995818.292:25879): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995818.297:25880): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995818.310:25881): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995818.310:25882): pid=213609 uid=0 auid=0 ses=62 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.313:25883): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213605 suid=0 rport=60858 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.314:25884): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995818.316:25885): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995818.317:25886): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995818.318:25887): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995818.318:25888): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.318:25889): pid=213598 uid=0 auid=0 ses=62 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.345:25890): pid=213627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995818.347:25891): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213627 suid=74 rport=60874 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995818.347:25892): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=213627 suid=74 rport=60874 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995818.437:25893): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995818.437:25894): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995818.469:25895): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995818.470:25896): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213627 suid=74 rport=60874 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995818.472:25897): pid=213624 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995818.472:25898): pid=213624 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=63 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995818.472:25898): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd17a29750 a2=1 a3=0 items=0 ppid=38931 pid=213624 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=63 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995818.472:25898): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995818.474:25899): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995818.504:25900): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.506:25901): pid=213680 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995818.507:25902): pid=213680 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995818.550:25903): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995818.551:25904): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995818.552:25905): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995818.625:25906): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995818.625:25907): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F636F6C6C656374642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995818.627:25908): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995818.630:25909): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995831.126:25910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995831.131:25911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995831.135:25912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995831.139:25913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995831.236:25914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995831.238:25915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.340:25916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.378:25917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.407:25918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.449:25919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.455:25920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995831.639:25921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995832.056:25922): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995832.309:25923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_collectd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995832.313:25924): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995832.314:25925): pid=213681 uid=0 auid=0 ses=63 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995832.319:25926): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=213680 suid=0 rport=60874 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995832.319:25927): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995832.324:25928): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995832.324:25929): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995832.324:25930): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995832.325:25931): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995832.325:25932): pid=213624 uid=0 auid=0 ses=63 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=213624 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.355:25933): pid=214971 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995835.357:25934): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214971 suid=74 rport=42446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995835.357:25935): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214971 suid=74 rport=42446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995835.446:25936): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995835.446:25937): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995835.476:25938): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995835.476:25939): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=214971 suid=74 rport=42446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995835.478:25940): pid=214970 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995835.478:25941): pid=214970 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=64 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995835.478:25941): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffca6720b0 a2=1 a3=0 items=0 ppid=38931 pid=214970 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=64 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995835.478:25941): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995835.480:25942): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995835.514:25943): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.516:25944): pid=214973 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995835.518:25945): pid=214973 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995835.563:25946): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995835.563:25947): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.568:25948): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995835.644:25949): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995835.645:25950): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995835.647:25951): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995835.652:25952): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995835.670:25953): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995835.670:25954): pid=214974 uid=0 auid=0 ses=64 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.674:25955): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=214973 suid=0 rport=42446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.674:25956): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995835.677:25957): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995835.678:25958): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995835.678:25959): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995835.678:25960): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.678:25961): pid=214970 uid=0 auid=0 ses=64 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214970 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.699:25962): pid=214990 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995835.700:25963): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214990 suid=74 rport=42450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995835.701:25964): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=214990 suid=74 rport=42450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995835.790:25965): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995835.790:25966): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995835.822:25967): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995835.823:25968): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=214990 suid=74 rport=42450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995835.826:25969): pid=214989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995835.826:25970): pid=214989 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=65 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995835.826:25970): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcd23abf40 a2=1 a3=0 items=0 ppid=38931 pid=214989 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=65 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995835.826:25970): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995835.828:25971): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995835.851:25972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995835.857:25973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995835.861:25974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995835.872:25975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995835.878:25976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995835.904:25977): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.905:25978): pid=215029 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995835.907:25979): pid=215029 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995835.949:25980): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995835.949:25981): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995835.951:25982): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995835.972:25983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995835.978:25984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995836.001:25985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995836.004:25986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995836.036:25987): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995836.037:25988): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995836.037:25989): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995836.041:25990): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995836.067:25991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.125:25992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.171:25993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.325:25994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995836.335:25995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.345:25996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.379:25997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.443:25998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.477:25999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.489:26000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.543:26001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.568:26002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995836.598:26003): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995836.688:26004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995836.823:26005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995836.828:26006): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995836.828:26007): pid=215049 uid=0 auid=0 ses=65 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995836.833:26008): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215029 suid=0 rport=42450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995836.834:26009): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995836.838:26010): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995836.838:26011): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995836.839:26012): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995836.839:26013): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995836.839:26014): pid=214989 uid=0 auid=0 ses=65 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=214989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.517:26015): pid=215405 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215405 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995838.519:26016): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215405 suid=74 rport=38060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995838.519:26017): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215405 suid=74 rport=38060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773995838.626:26018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773995838.641:26019): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995838.641:26020): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995838.672:26021): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995838.672:26022): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215405 suid=74 rport=38060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995838.675:26023): pid=215404 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995838.675:26024): pid=215404 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=66 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995838.675:26024): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe99d30570 a2=1 a3=0 items=0 ppid=38931 pid=215404 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=66 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995838.675:26024): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995838.677:26025): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995838.715:26026): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.717:26027): pid=215446 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995838.719:26028): pid=215446 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995838.763:26029): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995838.763:26030): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.766:26031): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215472 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995838.835:26032): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995838.835:26033): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995838.837:26034): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995838.842:26035): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995838.857:26036): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995838.857:26037): pid=215472 uid=0 auid=0 ses=66 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.860:26038): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215446 suid=0 rport=38060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.862:26039): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995838.864:26040): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995838.864:26041): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995838.865:26042): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995838.865:26043): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995838.865:26044): pid=215404 uid=0 auid=0 ses=66 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215404 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995839.289:26045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995839.516:26046): pid=215567 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215567 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995839.518:26047): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215567 suid=74 rport=38072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995839.518:26048): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215567 suid=74 rport=38072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995839.612:26049): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995839.612:26050): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995839.639:26051): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995839.640:26052): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215567 suid=74 rport=38072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995839.642:26053): pid=215566 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995839.643:26054): pid=215566 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=67 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995839.643:26054): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3c09cd60 a2=1 a3=0 items=0 ppid=38931 pid=215566 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=67 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995839.643:26054): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995839.645:26055): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995839.682:26056): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995839.684:26057): pid=215569 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995839.686:26058): pid=215569 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995839.729:26059): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995839.729:26060): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995839.732:26061): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215570 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995839.807:26062): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995839.808:26063): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F6D6574726963642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995839.809:26064): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995839.814:26065): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995839.830:26066): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995839.831:26067): pid=215570 uid=0 auid=0 ses=67 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995839.834:26068): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215569 suid=0 rport=38072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995839.834:26069): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995839.837:26070): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995839.837:26071): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995839.838:26072): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995839.838:26073): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995839.838:26074): pid=215566 uid=0 auid=0 ses=67 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215566 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.454:26075): pid=215622 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215622 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995840.455:26076): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215622 suid=74 rport=38080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995840.455:26077): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=215622 suid=74 rport=38080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995840.534:26078): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995840.534:26079): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995840.563:26080): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995840.563:26081): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215622 suid=74 rport=38080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995840.566:26082): pid=215611 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995840.566:26083): pid=215611 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=68 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995840.566:26083): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff53057650 a2=1 a3=0 items=0 ppid=38931 pid=215611 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=68 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995840.566:26083): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995840.568:26084): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995840.590:26085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.594:26086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.597:26087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.600:26088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.603:26089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.605:26090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.608:26091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.614:26092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.621:26093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.625:26094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995840.628:26095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995840.662:26096): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.664:26097): pid=215734 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995840.665:26098): pid=215734 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995840.709:26099): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995840.709:26100): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.710:26101): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995840.766:26102): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995840.766:26103): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F676E6F636368695F7374617473642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995840.767:26104): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995840.770:26105): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995840.786:26106): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995840.786:26107): pid=215761 uid=0 auid=0 ses=68 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.789:26108): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=215734 suid=0 rport=38080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.789:26109): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995840.792:26110): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995840.792:26111): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995840.793:26112): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995840.793:26113): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995840.793:26114): pid=215611 uid=0 auid=0 ses=68 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=215611 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995840.884:26115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995840.919:26116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995840.938:26117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.110:26118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.137:26119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.160:26120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.166:26121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.186:26122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.206:26123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.275:26124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995841.334:26125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995842.633:26126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995843.290:26127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995845.153:26128): pid=216049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995845.155:26129): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216049 suid=74 rport=38088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995845.155:26130): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216049 suid=74 rport=38088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995845.248:26131): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995845.248:26132): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995845.280:26133): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995845.280:26134): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216049 suid=74 rport=38088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995845.283:26135): pid=216048 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995845.283:26136): pid=216048 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=69 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995845.283:26136): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3634e100 a2=1 a3=0 items=0 ppid=38931 pid=216048 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=69 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995845.283:26136): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995845.285:26137): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995845.324:26138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995845.335:26139): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.336:26140): pid=216054 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995845.338:26141): pid=216054 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995845.383:26142): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995845.384:26143): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.388:26144): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216066 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995845.443:26145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995845.466:26146): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995845.467:26147): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995845.468:26148): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995845.474:26149): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995845.491:26150): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995845.492:26151): pid=216066 uid=0 auid=0 ses=69 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.495:26152): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216054 suid=0 rport=38088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.495:26153): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216054 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995845.499:26154): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995845.500:26155): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995845.500:26156): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995845.500:26157): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.500:26158): pid=216048 uid=0 auid=0 ses=69 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216048 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.528:26159): pid=216143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1773995845.528:26160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773995845.530:26161): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216143 suid=74 rport=38104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995845.530:26162): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216143 suid=74 rport=38104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995845.621:26163): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995845.621:26164): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995845.653:26165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995845.655:26166): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995845.656:26167): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216143 suid=74 rport=38104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995845.658:26168): pid=216136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995845.659:26169): pid=216136 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=70 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995845.659:26169): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcaa188b50 a2=1 a3=0 items=0 ppid=38931 pid=216136 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=70 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995845.659:26169): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995845.661:26170): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995845.700:26171): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.701:26172): pid=216176 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995845.703:26173): pid=216176 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995845.746:26174): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995845.746:26175): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995845.748:26176): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995845.819:26177): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995845.819:26178): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995845.821:26179): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995845.825:26180): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995849.090:26181): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995849.297:26182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995849.303:26183): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995849.303:26184): pid=216181 uid=0 auid=0 ses=70 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995849.309:26185): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216176 suid=0 rport=38104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995849.310:26186): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995849.315:26187): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995849.316:26188): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995849.317:26189): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995849.317:26190): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995849.317:26191): pid=216136 uid=0 auid=0 ses=70 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.348:26192): pid=216785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995854.350:26193): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216785 suid=74 rport=43060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995854.350:26194): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216785 suid=74 rport=43060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995854.433:26195): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995854.433:26196): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995854.463:26197): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995854.464:26198): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216785 suid=74 rport=43060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995854.467:26199): pid=216784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995854.467:26200): pid=216784 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=71 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995854.467:26200): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6309c4f0 a2=1 a3=0 items=0 ppid=38931 pid=216784 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=71 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995854.467:26200): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995854.469:26201): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995854.507:26202): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.509:26203): pid=216787 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995854.511:26204): pid=216787 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995854.555:26205): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995854.555:26206): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.558:26207): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995854.630:26208): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995854.631:26209): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995854.632:26210): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995854.636:26211): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995854.651:26212): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995854.651:26213): pid=216788 uid=0 auid=0 ses=71 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.654:26214): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216787 suid=0 rport=43060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.654:26215): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995854.657:26216): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995854.657:26217): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995854.658:26218): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995854.658:26219): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.658:26220): pid=216784 uid=0 auid=0 ses=71 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.675:26221): pid=216804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995854.676:26222): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216804 suid=74 rport=43066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995854.676:26223): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=216804 suid=74 rport=43066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995854.754:26224): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995854.755:26225): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995854.786:26226): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995854.786:26227): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216804 suid=74 rport=43066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995854.789:26228): pid=216803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995854.789:26229): pid=216803 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=72 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995854.789:26229): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4afd52b0 a2=1 a3=0 items=0 ppid=38931 pid=216803 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=72 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995854.789:26229): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995854.790:26230): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995854.818:26231): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.820:26232): pid=216829 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995854.821:26233): pid=216829 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995854.864:26234): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995854.864:26235): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995854.868:26236): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995854.926:26237): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995854.926:26238): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995854.927:26239): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995854.931:26240): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995855.068:26241): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995855.282:26242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995855.286:26243): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995855.287:26244): pid=216831 uid=0 auid=0 ses=72 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995855.292:26245): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=216829 suid=0 rport=43066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995855.293:26246): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995855.297:26247): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995855.297:26248): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995855.298:26249): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995855.298:26250): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995855.298:26251): pid=216803 uid=0 auid=0 ses=72 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=216803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995861.638:26252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995861.642:26253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995861.646:26254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995861.649:26255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995861.655:26256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995861.873:26257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995861.899:26258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995861.905:26259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995862.012:26260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995862.064:26261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773995865.380:26262): pid=206194 uid=0 auid=0 ses=34 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995865.382:26263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995865.435:26264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.636:26265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.640:26266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.643:26267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.647:26268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.650:26269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.657:26270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.662:26271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.668:26272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.674:26273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.679:26274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995866.798:26275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995866.944:26276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995866.952:26277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.007:26278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.027:26279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.131:26280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.177:26281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.220:26282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.281:26283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.362:26284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.417:26285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995867.441:26286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995869.621:26287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995870.218:26288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995870.894:26289): pid=218220 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995870.895:26290): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=218220 suid=74 rport=44060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995870.896:26291): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=218220 suid=74 rport=44060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995870.986:26292): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995870.986:26293): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995871.016:26294): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995871.016:26295): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=218220 suid=74 rport=44060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995871.019:26296): pid=218219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995871.019:26297): pid=218219 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=73 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995871.019:26297): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec36fa530 a2=1 a3=0 items=0 ppid=38931 pid=218219 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=73 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995871.019:26297): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995871.021:26298): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995871.043:26299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.048:26300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.054:26301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.103:26302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.130:26303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995871.145:26304): pid=218251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773995871.145:26305): pid=218251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773995871.146:26306): pid=218251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995871.146:26307): pid=218251 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=74 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995871.146:26307): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=218251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995871.146:26307): proctitle="(systemd)"
type=USER_START msg=audit(1773995871.150:26308): pid=218251 uid=0 auid=0 ses=74 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995871.160:26309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.167:26310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995871.179:26311): prog-id=1495 op=LOAD
type=SYSCALL msg=audit(1773995871.179:26311): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc03d08410 a2=90 a3=0 items=0 ppid=1 pid=218251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995871.179:26311): proctitle="(systemd)"
type=BPF msg=audit(1773995871.180:26312): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773995871.180:26313): prog-id=1496 op=LOAD
type=SERVICE_START msg=audit(1773995871.180:26314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SYSCALL msg=audit(1773995871.180:26313): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc03d084b0 a2=90 a3=4 items=0 ppid=1 pid=218251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=74 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995871.180:26313): proctitle="(systemd)"
type=BPF msg=audit(1773995871.180:26315): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773995871.201:26316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.257:26317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.336:26318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.341:26319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.342:26320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.360:26321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.370:26322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995871.386:26323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995871.409:26324): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.411:26325): pid=218426 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995871.412:26326): pid=218426 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995871.456:26327): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995871.456:26328): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.458:26329): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995871.502:26330): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995871.502:26331): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995871.503:26332): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995871.505:26333): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995871.514:26334): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995871.514:26335): pid=218461 uid=0 auid=0 ses=73 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.517:26336): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=218426 suid=0 rport=44060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.517:26337): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995871.520:26338): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995871.520:26339): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995871.520:26340): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995871.520:26341): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.520:26342): pid=218219 uid=0 auid=0 ses=73 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218219 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.537:26343): pid=218493 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218493 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995871.541:26344): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=218493 suid=74 rport=44064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995871.541:26345): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=218493 suid=74 rport=44064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773995871.571:26346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.591:26347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.610:26348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773995871.622:26349): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995871.622:26350): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995871.645:26351): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995871.645:26352): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=218493 suid=74 rport=44064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995871.647:26353): pid=218490 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995871.647:26354): pid=218490 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=75 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995871.647:26354): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc96888d0 a2=1 a3=0 items=0 ppid=38931 pid=218490 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=75 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995871.647:26354): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995871.649:26355): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995871.653:26356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.682:26357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995871.690:26358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995871.695:26359): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995871.696:26360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995871.696:26361): pid=218530 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995871.697:26362): pid=218530 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995871.741:26363): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995871.741:26364): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995871.743:26365): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218532 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995871.752:26366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995871.792:26367): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995871.792:26368): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995871.794:26369): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995871.798:26370): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995873.636:26371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995874.284:26372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995875.630:26373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995875.739:26374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995875.866:26375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995875.886:26376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995883.581:26377): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995883.777:26378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995883.782:26379): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995883.782:26380): pid=218532 uid=0 auid=0 ses=75 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995883.787:26381): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=218530 suid=0 rport=44064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995883.788:26382): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218530 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995883.793:26383): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995883.793:26384): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995883.794:26385): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995883.794:26386): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995883.794:26387): pid=218490 uid=0 auid=0 ses=75 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=218490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995892.633:26388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995892.637:26389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995892.640:26390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995892.644:26391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995892.809:26392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995892.919:26393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995892.956:26394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995893.007:26395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773995893.881:26396): pid=218266 uid=0 auid=0 ses=74 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995893.882:26397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995893.918:26398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.635:26399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.639:26400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.643:26401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.647:26402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.651:26403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.654:26404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.663:26405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.667:26406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.671:26407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.675:26408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995897.679:26409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.007:26410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.062:26411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.082:26412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.114:26413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.206:26414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.237:26415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.247:26416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.344:26417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.394:26418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.445:26419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995898.465:26420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995900.633:26421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995901.231:26422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.631:26423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.635:26424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.638:26425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.642:26426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.645:26427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.649:26428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.748:26429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.752:26430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.757:26431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.760:26432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995901.770:26433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995901.865:26434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995901.905:26435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995901.927:26436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995901.977:26437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.022:26438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.104:26439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.127:26440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.159:26441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.219:26442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.220:26443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995902.270:26444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995904.621:26445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995905.179:26446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995906.620:26447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995906.622:26448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995906.734:26449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995906.925:26450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995923.630:26451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995923.634:26452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995923.636:26453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995923.639:26454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995923.842:26455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995923.938:26456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995923.962:26457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995924.159:26458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.632:26459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.637:26460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.641:26461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.644:26462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.648:26463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.652:26464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.656:26465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.660:26466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.664:26467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.668:26468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995928.682:26469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.047:26470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.051:26471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.082:26472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.091:26473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.105:26474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.127:26475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.142:26476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.165:26477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.185:26478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.196:26479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995929.234:26480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995931.626:26481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.226:26482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.229:26483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.232:26484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.234:26485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.236:26486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.239:26487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.244:26488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.252:26489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.254:26490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.260:26491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.263:26492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995932.388:26493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.521:26494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.573:26495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.631:26496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.723:26497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.733:26498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.735:26499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.788:26500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.806:26501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.859:26502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995932.924:26503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995933.010:26504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995935.621:26505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995936.176:26506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995937.528:26507): pid=223592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995937.530:26508): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=223592 suid=74 rport=59446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995937.530:26509): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=223592 suid=74 rport=59446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995937.624:26510): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995937.625:26511): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995937.626:26512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995937.631:26513): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995937.657:26514): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995937.657:26515): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=223592 suid=74 rport=59446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995937.661:26516): pid=223587 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995937.661:26517): pid=223587 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=76 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995937.661:26517): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd456ddfc0 a2=1 a3=0 items=0 ppid=38931 pid=223587 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=76 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995937.661:26517): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995937.663:26518): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995937.710:26519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995937.752:26520): pid=223651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773995937.752:26521): pid=223651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773995937.752:26522): pid=223651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995937.753:26523): pid=223651 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=77 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995937.753:26523): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=223651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995937.753:26523): proctitle="(systemd)"
type=USER_START msg=audit(1773995937.755:26524): pid=223651 uid=0 auid=0 ses=77 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995937.780:26525): prog-id=1497 op=LOAD
type=SYSCALL msg=audit(1773995937.780:26525): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1973a850 a2=90 a3=0 items=0 ppid=1 pid=223651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995937.780:26525): proctitle="(systemd)"
type=BPF msg=audit(1773995937.781:26526): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773995937.781:26527): prog-id=1498 op=LOAD
type=SYSCALL msg=audit(1773995937.781:26527): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1973a8f0 a2=90 a3=4 items=0 ppid=1 pid=223651 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=77 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995937.781:26527): proctitle="(systemd)"
type=BPF msg=audit(1773995937.781:26528): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995937.799:26529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995938.017:26530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995938.046:26531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995938.055:26532): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.057:26533): pid=223706 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995938.059:26534): pid=223706 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995938.103:26535): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995938.103:26536): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.105:26537): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995938.171:26538): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995938.171:26539): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995938.173:26540): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995938.179:26541): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995938.196:26542): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995938.197:26543): pid=223708 uid=0 auid=0 ses=76 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.201:26544): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=223706 suid=0 rport=59446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.202:26545): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995938.205:26546): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995938.205:26547): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995938.206:26548): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995938.206:26549): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.206:26550): pid=223587 uid=0 auid=0 ses=76 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223587 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.230:26551): pid=223732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995938.232:26552): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=223732 suid=74 rport=59452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995938.232:26553): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=223732 suid=74 rport=59452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995938.318:26554): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995938.318:26555): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995938.349:26556): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995938.349:26557): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=223732 suid=74 rport=59452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995938.352:26558): pid=223731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995938.352:26559): pid=223731 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=78 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995938.352:26559): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd2e90970 a2=1 a3=0 items=0 ppid=38931 pid=223731 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=78 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995938.352:26559): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995938.354:26560): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995938.396:26561): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.398:26562): pid=223746 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995938.399:26563): pid=223746 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995938.442:26564): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995938.442:26565): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995938.444:26566): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995938.505:26567): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995938.505:26568): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995938.507:26569): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995938.511:26570): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995950.062:26571): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995950.301:26572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_neutron_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995950.305:26573): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995950.306:26574): pid=223747 uid=0 auid=0 ses=78 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995950.309:26575): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995950.309:26576): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995950.309:26577): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=223746 suid=0 rport=59452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995950.310:26578): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995950.313:26579): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995950.314:26580): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995950.314:26581): pid=223731 uid=0 auid=0 ses=78 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=223731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995954.631:26582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995954.634:26583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995954.638:26584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995954.643:26585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995954.883:26586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995954.895:26587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995954.961:26588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995954.989:26589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.632:26590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.635:26591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.637:26592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.639:26593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.641:26594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.643:26595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.649:26596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.652:26597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.655:26598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995959.658:26599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995959.890:26600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995959.920:26601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.004:26602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.014:26603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.048:26604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.080:26605): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.131:26606): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.145:26607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.189:26608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.329:26609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773995960.350:26610): pid=223658 uid=0 auid=0 ses=77 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773995960.353:26611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995960.395:26612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.630:26613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.634:26614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.637:26615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.643:26616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.775:26617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.778:26618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.782:26619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.841:26620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.847:26621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.901:26622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995962.915:26623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995962.928:26624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995962.938:26625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995963.031:26626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.062:26627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.188:26628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.209:26629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.217:26630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.228:26631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.232:26632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.281:26633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.294:26634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.324:26635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995963.371:26636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995966.624:26637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995967.201:26638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995968.630:26639): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995968.635:26640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995968.827:26641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995968.850:26642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995985.630:26643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995985.634:26644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995985.638:26645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995985.642:26646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995985.802:26647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995985.874:26648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995985.946:26649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995986.002:26650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995986.724:26651): pid=227319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995986.726:26652): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=227319 suid=74 rport=60222 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995986.726:26653): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=227319 suid=74 rport=60222 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995986.820:26654): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995986.820:26655): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995986.851:26656): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995986.851:26657): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=227319 suid=74 rport=60222 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995986.853:26658): pid=227318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995986.853:26659): pid=227318 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=79 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995986.853:26659): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2ecadb10 a2=1 a3=0 items=0 ppid=38931 pid=227318 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=79 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995986.853:26659): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995986.855:26660): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995986.899:26661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995986.947:26662): pid=227322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773995986.947:26663): pid=227322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773995986.948:26664): pid=227322 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995986.949:26665): pid=227322 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=80 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995986.949:26665): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=227322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995986.949:26665): proctitle="(systemd)"
type=USER_START msg=audit(1773995986.952:26666): pid=227322 uid=0 auid=0 ses=80 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995986.974:26667): prog-id=1499 op=LOAD
type=SYSCALL msg=audit(1773995986.974:26667): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff3de1550 a2=90 a3=0 items=0 ppid=1 pid=227322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995986.974:26667): proctitle="(systemd)"
type=BPF msg=audit(1773995986.975:26668): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773995986.975:26669): prog-id=1500 op=LOAD
type=SYSCALL msg=audit(1773995986.975:26669): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff3de15f0 a2=90 a3=4 items=0 ppid=1 pid=227322 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=80 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995986.975:26669): proctitle="(systemd)"
type=BPF msg=audit(1773995986.975:26670): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773995987.193:26671): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773995987.219:26672): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.220:26673): pid=227337 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995987.223:26674): pid=227337 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995987.266:26675): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995987.267:26676): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.269:26677): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995987.343:26678): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995987.343:26679): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995987.344:26680): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995987.348:26681): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995987.364:26682): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995987.364:26683): pid=227338 uid=0 auid=0 ses=79 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995987.367:26684): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995987.367:26685): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.368:26686): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=227337 suid=0 rport=60222 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.368:26687): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995987.371:26688): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995987.372:26689): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.373:26690): pid=227318 uid=0 auid=0 ses=79 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.399:26691): pid=227362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995987.400:26692): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=227362 suid=74 rport=55600 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995987.401:26693): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=227362 suid=74 rport=55600 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995987.491:26694): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995987.491:26695): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995987.521:26696): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995987.522:26697): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=227362 suid=74 rport=55600 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995987.525:26698): pid=227361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995987.525:26699): pid=227361 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=81 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995987.525:26699): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe6bf56330 a2=1 a3=0 items=0 ppid=38931 pid=227361 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=81 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995987.525:26699): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995987.527:26700): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995987.564:26701): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.566:26702): pid=227364 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995987.568:26703): pid=227364 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995987.612:26704): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995987.612:26705): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995987.616:26706): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995987.682:26707): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995987.682:26708): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995987.684:26709): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995987.687:26710): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773995990.387:26711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.392:26712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.398:26713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.402:26714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.405:26715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.413:26716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.423:26717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.430:26718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.433:26719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995990.436:26720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.684:26721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.720:26722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.726:26723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.760:26724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.864:26725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.882:26726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.892:26727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.909:26728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995990.934:26729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773995990.942:26730): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773995991.075:26731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995991.173:26732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_placement_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995991.180:26733): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995991.180:26734): pid=227372 uid=0 auid=0 ses=81 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995991.185:26735): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=227364 suid=0 rport=55600 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995991.186:26736): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995991.189:26737): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995991.189:26738): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995991.189:26739): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995991.189:26740): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995991.189:26741): pid=227361 uid=0 auid=0 ses=81 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=227361 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773995993.631:26742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.636:26743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.639:26744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.643:26745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.646:26746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.650:26747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.654:26748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.658:26749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.662:26750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.667:26751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995993.682:26752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995993.890:26753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.036:26754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.053:26755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.080:26756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.084:26757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.089:26758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.105:26759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.148:26760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.199:26761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.283:26762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995994.388:26763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995996.288:26764): pid=228319 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228319 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995996.290:26765): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228319 suid=74 rport=55612 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995996.291:26766): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228319 suid=74 rport=55612 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995996.382:26767): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995996.382:26768): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995996.413:26769): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995996.414:26770): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228319 suid=74 rport=55612 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995996.417:26771): pid=228318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995996.417:26772): pid=228318 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=82 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995996.417:26772): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffba7a3670 a2=1 a3=0 items=0 ppid=38931 pid=228318 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=82 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995996.417:26772): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995996.419:26773): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995996.458:26774): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.459:26775): pid=228321 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995996.461:26776): pid=228321 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995996.506:26777): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995996.506:26778): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.511:26779): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995996.594:26780): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995996.595:26781): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995996.597:26782): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995996.602:26783): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995996.618:26784): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995996.618:26785): pid=228322 uid=0 auid=0 ses=82 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.622:26786): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228321 suid=0 rport=55612 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.622:26787): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995996.626:26788): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995996.626:26789): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995996.627:26790): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995996.627:26791): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.627:26792): pid=228318 uid=0 auid=0 ses=82 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.649:26793): pid=228352 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228352 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773995996.650:26794): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228352 suid=74 rport=55622 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773995996.650:26795): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228352 suid=74 rport=55622 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773995996.738:26796): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995996.738:26797): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773995996.760:26798): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773995996.760:26799): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228352 suid=74 rport=55622 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773995996.762:26800): pid=228343 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773995996.762:26801): pid=228343 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=83 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773995996.762:26801): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdb495f270 a2=1 a3=0 items=0 ppid=38931 pid=228343 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=83 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773995996.762:26801): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773995996.764:26802): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995996.797:26803): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.798:26804): pid=228397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773995996.799:26805): pid=228397 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773995996.843:26806): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773995996.843:26807): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995996.847:26808): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228398 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773995996.912:26809): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773995996.912:26810): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773995996.913:26811): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773995996.918:26812): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773995997.079:26813): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773995997.241:26814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995997.261:26815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773995997.263:26816): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995997.263:26817): pid=228398 uid=0 auid=0 ses=83 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995997.267:26818): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228397 suid=0 rport=55622 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773995997.268:26819): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773995997.271:26820): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773995997.271:26821): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773995997.271:26822): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773995997.271:26823): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773995997.271:26824): pid=228343 uid=0 auid=0 ses=83 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773995997.805:26825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995999.626:26826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773995999.628:26827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995999.805:26828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773995999.846:26829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996002.494:26830): pid=228942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996002.496:26831): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228942 suid=74 rport=58248 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996002.496:26832): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228942 suid=74 rport=58248 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996002.583:26833): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996002.583:26834): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996002.614:26835): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996002.615:26836): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228942 suid=74 rport=58248 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996002.617:26837): pid=228941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996002.618:26838): pid=228941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=84 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996002.618:26838): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffda1bc7130 a2=1 a3=0 items=0 ppid=38931 pid=228941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=84 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996002.618:26838): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996002.620:26839): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996002.660:26840): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.661:26841): pid=228945 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996002.663:26842): pid=228945 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996002.707:26843): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996002.707:26844): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.712:26845): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228946 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996002.791:26846): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996002.792:26847): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996002.796:26848): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996002.801:26849): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996002.821:26850): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996002.822:26851): pid=228946 uid=0 auid=0 ses=84 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.826:26852): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228945 suid=0 rport=58248 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.826:26853): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996002.829:26854): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996002.830:26855): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996002.831:26856): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996002.831:26857): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.831:26858): pid=228941 uid=0 auid=0 ses=84 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996002.853:26859): pid=228969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228969 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996002.854:26860): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228969 suid=74 rport=58258 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996002.854:26861): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=228969 suid=74 rport=58258 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996002.932:26862): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996002.932:26863): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996002.964:26864): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996002.964:26865): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228969 suid=74 rport=58258 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996002.967:26866): pid=228962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996002.967:26867): pid=228962 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=85 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996002.967:26867): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef913db90 a2=1 a3=0 items=0 ppid=38931 pid=228962 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=85 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996002.967:26867): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996002.969:26868): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996003.010:26869): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996003.012:26870): pid=228972 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996003.014:26871): pid=228972 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996003.059:26872): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996003.059:26873): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996003.062:26874): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996003.137:26875): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996003.137:26876): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996003.138:26877): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996003.142:26878): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996006.414:26879): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996006.613:26880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996006.617:26881): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996006.617:26882): pid=228973 uid=0 auid=0 ses=85 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996006.622:26883): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=228972 suid=0 rport=58258 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996006.623:26884): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996006.627:26885): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996006.628:26886): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996006.629:26887): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996006.629:26888): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996006.629:26889): pid=228962 uid=0 auid=0 ses=85 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=228962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996011.855:26890): pid=229617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.184:26891): pid=229679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996013.186:26892): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=229679 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996013.186:26893): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=229679 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996013.274:26894): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996013.274:26895): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996013.298:26896): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996013.298:26897): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229679 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996013.301:26898): pid=229670 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996013.301:26899): pid=229670 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=86 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996013.301:26899): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0c167a30 a2=1 a3=0 items=0 ppid=38931 pid=229670 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=86 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996013.301:26899): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996013.302:26900): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996013.338:26901): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.340:26902): pid=229714 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996013.341:26903): pid=229714 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996013.386:26904): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996013.386:26905): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.389:26906): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996013.453:26907): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996013.453:26908): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996013.454:26909): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996013.459:26910): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996013.470:26911): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996013.470:26912): pid=229723 uid=0 auid=0 ses=86 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.473:26913): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229714 suid=0 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.473:26914): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229714 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996013.476:26915): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996013.476:26916): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996013.477:26917): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996013.477:26918): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.477:26919): pid=229670 uid=0 auid=0 ses=86 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229670 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.494:26920): pid=229747 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229747 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996013.495:26921): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=229747 suid=74 rport=46506 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996013.495:26922): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=229747 suid=74 rport=46506 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996013.583:26923): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996013.583:26924): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996013.603:26925): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996013.604:26926): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229747 suid=74 rport=46506 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996013.606:26927): pid=229746 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996013.606:26928): pid=229746 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=87 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996013.606:26928): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdad9b9cf0 a2=1 a3=0 items=0 ppid=38931 pid=229746 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=87 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996013.606:26928): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996013.607:26929): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996013.650:26930): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.651:26931): pid=229749 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229749 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996013.652:26932): pid=229749 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996013.695:26933): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996013.695:26934): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996013.697:26935): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229750 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996013.750:26936): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996013.750:26937): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996013.751:26938): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996013.755:26939): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996016.378:26940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996016.382:26941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996016.385:26942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996016.389:26943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996016.496:26944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996016.660:26945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773996016.765:26946): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996016.766:26947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996016.816:26948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996017.145:26949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996017.150:26950): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996017.150:26951): pid=229750 uid=0 auid=0 ses=87 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996017.154:26952): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=229749 suid=0 rport=46506 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996017.155:26953): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229749 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996017.158:26954): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996017.159:26955): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996017.159:26956): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996017.159:26957): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996017.159:26958): pid=229746 uid=0 auid=0 ses=87 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=229746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996021.629:26959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.634:26960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.639:26961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.643:26962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.648:26963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.652:26964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.660:26965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.666:26966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996021.673:26967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996021.869:26968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996021.949:26969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996021.971:26970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996021.984:26971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996022.057:26972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996022.129:26973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996022.184:26974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996022.206:26975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996022.256:26976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996023.456:26977): pid=230595 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230595 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996023.457:26978): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=230595 suid=74 rport=51982 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996023.458:26979): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=230595 suid=74 rport=51982 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996023.534:26980): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996023.534:26981): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996023.561:26982): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996023.561:26983): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=230595 suid=74 rport=51982 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996023.564:26984): pid=230594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996023.564:26985): pid=230594 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=88 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996023.564:26985): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff58217240 a2=1 a3=0 items=0 ppid=38931 pid=230594 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=88 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996023.564:26985): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996023.567:26986): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996023.597:26987): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.599:26988): pid=230605 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996023.600:26989): pid=230605 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996023.644:26990): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996023.644:26991): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.648:26992): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996023.715:26993): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996023.716:26994): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996023.717:26995): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996023.722:26996): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996023.741:26997): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996023.742:26998): pid=230613 uid=0 auid=0 ses=88 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.745:26999): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=230605 suid=0 rport=51982 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.745:27000): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230605 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996023.749:27001): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996023.749:27002): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996023.750:27003): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996023.750:27004): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.750:27005): pid=230594 uid=0 auid=0 ses=88 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.774:27006): pid=230630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996023.776:27007): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=230630 suid=74 rport=51984 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996023.776:27008): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=230630 suid=74 rport=51984 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996023.867:27009): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996023.867:27010): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996023.896:27011): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996023.896:27012): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=230630 suid=74 rport=51984 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996023.899:27013): pid=230629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996023.899:27014): pid=230629 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=89 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996023.899:27014): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc00922d60 a2=1 a3=0 items=0 ppid=38931 pid=230629 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=89 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996023.899:27014): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996023.901:27015): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996023.921:27016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996023.939:27017): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.940:27018): pid=230646 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996023.942:27019): pid=230646 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996023.985:27020): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996023.985:27021): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996023.988:27022): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996024.068:27023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996024.068:27024): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996024.068:27025): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996024.070:27026): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996024.074:27027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996024.079:27028): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996024.103:27029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996024.111:27030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.117:27031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996024.196:27032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996024.244:27033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.298:27034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996024.311:27035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.368:27036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996024.411:27037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.414:27038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.527:27039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.574:27040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.644:27041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.706:27042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996024.973:27043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773996027.412:27044): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996027.650:27045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996027.654:27046): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996027.654:27047): pid=230653 uid=0 auid=0 ses=89 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996027.659:27048): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=230646 suid=0 rport=51984 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996027.659:27049): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996027.663:27050): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996027.663:27051): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996027.664:27052): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996027.664:27053): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996027.664:27054): pid=230629 uid=0 auid=0 ses=89 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=230629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996028.631:27055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996029.961:27056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996029.966:27057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996029.969:27058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996030.121:27059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996030.158:27060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996037.405:27061): pid=231679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996037.406:27062): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=231679 suid=74 rport=55792 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996037.407:27063): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=231679 suid=74 rport=55792 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996037.482:27064): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996037.482:27065): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996037.500:27066): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996037.501:27067): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=231679 suid=74 rport=55792 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996037.503:27068): pid=231678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996037.503:27069): pid=231678 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=90 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996037.503:27069): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5b2910e0 a2=1 a3=0 items=0 ppid=38931 pid=231678 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=90 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996037.503:27069): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996037.504:27070): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996037.529:27071): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.531:27072): pid=231681 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996037.533:27073): pid=231681 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996037.576:27074): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996037.576:27075): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.579:27076): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996037.641:27077): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996037.641:27078): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996037.643:27079): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996037.647:27080): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996037.664:27081): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996037.664:27082): pid=231682 uid=0 auid=0 ses=90 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.667:27083): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=231681 suid=0 rport=55792 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.667:27084): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231681 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996037.670:27085): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996037.671:27086): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996037.672:27087): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996037.672:27088): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.672:27089): pid=231678 uid=0 auid=0 ses=90 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.698:27090): pid=231698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996037.700:27091): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=231698 suid=74 rport=55806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996037.700:27092): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=231698 suid=74 rport=55806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996037.782:27093): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996037.782:27094): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996037.813:27095): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996037.813:27096): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=231698 suid=74 rport=55806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996037.815:27097): pid=231697 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996037.816:27098): pid=231697 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=91 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996037.816:27098): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffecdc2e8f0 a2=1 a3=0 items=0 ppid=38931 pid=231697 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=91 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996037.816:27098): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996037.817:27099): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996037.856:27100): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.857:27101): pid=231705 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996037.858:27102): pid=231705 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996037.899:27103): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996037.900:27104): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996037.901:27105): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996037.963:27106): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996037.964:27107): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996037.965:27108): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996037.969:27109): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996046.624:27110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996046.733:27111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996046.757:27112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996046.850:27113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996046.854:27114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996046.888:27115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996047.030:27116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996047.051:27117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.390:27118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.393:27119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.397:27120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.400:27121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.404:27122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.407:27123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.415:27124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.420:27125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996052.423:27126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.532:27127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.698:27128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.712:27129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.741:27130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.781:27131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.834:27132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.878:27133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.929:27134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996052.995:27135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.630:27136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.635:27137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.639:27138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.644:27139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.648:27140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.656:27141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.762:27142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996054.889:27143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996054.916:27144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996054.935:27145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996054.993:27146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996054.998:27147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996054.999:27148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996055.023:27149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996055.333:27150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996055.507:27151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996060.126:27152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996060.130:27153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996060.231:27154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996060.263:27155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996060.414:27156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996060.799:27157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773996067.464:27158): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996067.744:27159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996067.750:27160): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996067.751:27161): pid=231710 uid=0 auid=0 ses=91 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996067.756:27162): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=231705 suid=0 rport=55806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996067.756:27163): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996067.760:27164): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996067.760:27165): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996067.761:27166): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996067.761:27167): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996067.761:27168): pid=231697 uid=0 auid=0 ses=91 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=231697 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996077.632:27169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996077.637:27170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996077.640:27171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996077.645:27172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996077.815:27173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773996077.838:27174): pid=227324 uid=0 auid=0 ses=80 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773996077.838:27175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996077.880:27176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996077.904:27177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996077.953:27178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996077.999:27179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.631:27180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.636:27181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.639:27182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.643:27183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.647:27184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.651:27185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.654:27186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996083.660:27187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.008:27188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.034:27189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.083:27190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.188:27191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.211:27192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.239:27193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.325:27194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996084.369:27195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.630:27196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.634:27197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.638:27198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.642:27199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.645:27200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.649:27201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.654:27202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996085.657:27203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996085.853:27204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996085.966:27205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996085.993:27206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996086.022:27207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996086.115:27208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996086.132:27209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996086.165:27210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996086.410:27211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996090.627:27212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996090.630:27213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996090.753:27214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996090.871:27215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996090.892:27216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996091.475:27217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996100.225:27218): pid=236312 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236312 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996100.227:27219): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236312 suid=74 rport=42364 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996100.227:27220): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236312 suid=74 rport=42364 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996100.320:27221): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996100.320:27222): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996100.350:27223): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996100.351:27224): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236312 suid=74 rport=42364 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996100.353:27225): pid=236311 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996100.353:27226): pid=236311 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=92 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996100.353:27226): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb87db300 a2=1 a3=0 items=0 ppid=38931 pid=236311 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=92 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996100.353:27226): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996100.355:27227): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996100.409:27228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996100.455:27229): pid=236315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773996100.455:27230): pid=236315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773996100.456:27231): pid=236315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996100.457:27232): pid=236315 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=93 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996100.457:27232): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=236315 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996100.457:27232): proctitle="(systemd)"
type=USER_START msg=audit(1773996100.459:27233): pid=236315 uid=0 auid=0 ses=93 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996100.483:27234): prog-id=1501 op=LOAD
type=SYSCALL msg=audit(1773996100.483:27234): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd54523600 a2=90 a3=0 items=0 ppid=1 pid=236315 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996100.483:27234): proctitle="(systemd)"
type=BPF msg=audit(1773996100.484:27235): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773996100.484:27236): prog-id=1502 op=LOAD
type=SYSCALL msg=audit(1773996100.484:27236): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd545236a0 a2=90 a3=4 items=0 ppid=1 pid=236315 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=93 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996100.484:27236): proctitle="(systemd)"
type=BPF msg=audit(1773996100.484:27237): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773996100.661:27238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996100.687:27239): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.688:27240): pid=236330 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996100.689:27241): pid=236330 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996100.733:27242): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996100.733:27243): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.736:27244): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236331 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996100.793:27245): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996100.793:27246): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996100.794:27247): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996100.798:27248): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996100.812:27249): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996100.812:27250): pid=236331 uid=0 auid=0 ses=92 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996100.815:27251): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996100.815:27252): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.815:27253): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236330 suid=0 rport=42364 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.816:27254): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996100.819:27255): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996100.819:27256): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.820:27257): pid=236311 uid=0 auid=0 ses=92 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.841:27258): pid=236363 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996100.843:27259): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236363 suid=74 rport=42376 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996100.843:27260): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236363 suid=74 rport=42376 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996100.916:27261): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996100.916:27262): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996100.946:27263): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996100.947:27264): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236363 suid=74 rport=42376 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996100.949:27265): pid=236362 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996100.949:27266): pid=236362 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=94 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996100.949:27266): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe87e70150 a2=1 a3=0 items=0 ppid=38931 pid=236362 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=94 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996100.949:27266): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996100.951:27267): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996100.984:27268): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996100.986:27269): pid=236365 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996100.988:27270): pid=236365 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996101.030:27271): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996101.030:27272): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996101.032:27273): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996101.099:27274): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996101.100:27275): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996101.100:27276): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996101.103:27277): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996101.749:27278): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996101.969:27279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996101.974:27280): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996101.975:27281): pid=236374 uid=0 auid=0 ses=94 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996101.981:27282): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236365 suid=0 rport=42376 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996101.981:27283): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236365 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996101.985:27284): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996101.986:27285): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996101.987:27286): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996101.987:27287): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996101.987:27288): pid=236362 uid=0 auid=0 ses=94 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.518:27289): pid=236719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996103.520:27290): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236719 suid=74 rport=42384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996103.520:27291): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236719 suid=74 rport=42384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996103.614:27292): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996103.615:27293): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996103.647:27294): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996103.648:27295): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236719 suid=74 rport=42384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996103.649:27296): pid=236718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996103.650:27297): pid=236718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=95 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996103.650:27297): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffedc08c670 a2=1 a3=0 items=0 ppid=38931 pid=236718 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=95 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996103.650:27297): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996103.651:27298): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996103.682:27299): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.683:27300): pid=236721 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996103.685:27301): pid=236721 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996103.729:27302): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996103.729:27303): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.733:27304): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996103.798:27305): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996103.798:27306): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996103.799:27307): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996103.804:27308): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996103.821:27309): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996103.821:27310): pid=236722 uid=0 auid=0 ses=95 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.825:27311): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236721 suid=0 rport=42384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.825:27312): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996103.828:27313): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996103.828:27314): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996103.829:27315): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996103.829:27316): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996103.829:27317): pid=236718 uid=0 auid=0 ses=95 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.501:27318): pid=236769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996104.502:27319): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236769 suid=74 rport=42396 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996104.502:27320): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236769 suid=74 rport=42396 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996104.594:27321): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996104.594:27322): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996104.617:27323): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996104.617:27324): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236769 suid=74 rport=42396 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996104.619:27325): pid=236768 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996104.619:27326): pid=236768 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=96 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996104.619:27326): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec8a46920 a2=1 a3=0 items=0 ppid=38931 pid=236768 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=96 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996104.619:27326): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996104.622:27327): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996104.650:27328): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.652:27329): pid=236822 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996104.654:27330): pid=236822 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996104.696:27331): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996104.696:27332): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.698:27333): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996104.765:27334): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996104.766:27335): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996104.768:27336): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996104.772:27337): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996104.786:27338): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996104.787:27339): pid=236823 uid=0 auid=0 ses=96 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.789:27340): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236822 suid=0 rport=42396 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.790:27341): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236822 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996104.792:27342): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996104.793:27343): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996104.794:27344): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996104.794:27345): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996104.794:27346): pid=236768 uid=0 auid=0 ses=96 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236768 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.371:27347): pid=236867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996105.372:27348): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236867 suid=74 rport=42412 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996105.374:27349): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236867 suid=74 rport=42412 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996105.455:27350): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996105.455:27351): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996105.476:27352): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996105.477:27353): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236867 suid=74 rport=42412 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996105.479:27354): pid=236866 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996105.479:27355): pid=236866 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=97 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996105.479:27355): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd8a73740 a2=1 a3=0 items=0 ppid=38931 pid=236866 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=97 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996105.479:27355): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996105.481:27356): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996105.514:27357): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.516:27358): pid=236872 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996105.517:27359): pid=236872 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996105.561:27360): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996105.561:27361): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.565:27362): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996105.635:27363): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996105.636:27364): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996105.638:27365): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996105.643:27366): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996105.659:27367): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996105.659:27368): pid=236873 uid=0 auid=0 ses=97 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996105.662:27369): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996105.662:27370): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.662:27371): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236872 suid=0 rport=42412 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.662:27372): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236872 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996105.665:27373): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996105.665:27374): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996105.666:27375): pid=236866 uid=0 auid=0 ses=97 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.317:27376): pid=236917 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996106.318:27377): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236917 suid=74 rport=42420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996106.318:27378): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236917 suid=74 rport=42420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996106.409:27379): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996106.409:27380): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996106.440:27381): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996106.440:27382): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236917 suid=74 rport=42420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996106.443:27383): pid=236915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996106.444:27384): pid=236915 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=98 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996106.444:27384): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd666105a0 a2=1 a3=0 items=0 ppid=38931 pid=236915 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=98 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996106.444:27384): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996106.445:27385): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996106.479:27386): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.481:27387): pid=236919 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996106.482:27388): pid=236919 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996106.526:27389): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996106.526:27390): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.528:27391): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236920 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996106.596:27392): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996106.596:27393): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996106.597:27394): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996106.601:27395): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996106.620:27396): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996106.621:27397): pid=236920 uid=0 auid=0 ses=98 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.624:27398): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236919 suid=0 rport=42420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.624:27399): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996106.627:27400): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996106.627:27401): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996106.628:27402): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996106.628:27403): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996106.628:27404): pid=236915 uid=0 auid=0 ses=98 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.315:27405): pid=236960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996107.317:27406): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236960 suid=74 rport=38220 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996107.317:27407): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=236960 suid=74 rport=38220 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996107.403:27408): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996107.403:27409): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996107.432:27410): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996107.433:27411): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236960 suid=74 rport=38220 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996107.435:27412): pid=236959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996107.435:27413): pid=236959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=99 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996107.435:27413): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc611e4920 a2=1 a3=0 items=0 ppid=38931 pid=236959 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=99 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996107.435:27413): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996107.437:27414): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996107.472:27415): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.473:27416): pid=236962 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996107.475:27417): pid=236962 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996107.517:27418): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996107.517:27419): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.519:27420): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996107.572:27421): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996107.572:27422): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996107.575:27423): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996107.580:27424): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996107.590:27425): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996107.591:27426): pid=236963 uid=0 auid=0 ses=99 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.594:27427): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=236962 suid=0 rport=38220 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.594:27428): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996107.597:27429): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996107.597:27430): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996107.598:27431): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996107.598:27432): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996107.598:27433): pid=236959 uid=0 auid=0 ses=99 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=236959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.285:27434): pid=237011 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237011 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996108.287:27435): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237011 suid=74 rport=38224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996108.287:27436): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237011 suid=74 rport=38224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996108.377:27437): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996108.377:27438): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996108.407:27439): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996108.407:27440): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237011 suid=74 rport=38224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996108.410:27441): pid=237009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996108.410:27442): pid=237009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=100 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996108.410:27442): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc257296d0 a2=1 a3=0 items=0 ppid=38931 pid=237009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=100 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996108.410:27442): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996108.412:27443): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996108.431:27444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996108.435:27445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996108.439:27446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996108.443:27447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996108.466:27448): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.468:27449): pid=237067 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996108.470:27450): pid=237067 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996108.514:27451): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996108.515:27452): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.518:27453): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996108.566:27454): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996108.566:27455): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996108.567:27456): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996108.570:27457): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996108.585:27458): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996108.585:27459): pid=237083 uid=0 auid=0 ses=100 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996108.587:27460): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996108.587:27461): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.587:27462): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237067 suid=0 rport=38224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.588:27463): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237067 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996108.591:27464): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996108.591:27465): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996108.592:27466): pid=237009 uid=0 auid=0 ses=100 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996108.628:27467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996108.656:27468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996108.799:27469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996108.818:27470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996109.222:27471): pid=237165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996109.224:27472): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237165 suid=74 rport=38230 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996109.224:27473): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237165 suid=74 rport=38230 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996109.315:27474): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996109.315:27475): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996109.345:27476): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996109.346:27477): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237165 suid=74 rport=38230 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996109.348:27478): pid=237164 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996109.348:27479): pid=237164 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=101 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996109.348:27479): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcbb494310 a2=1 a3=0 items=0 ppid=38931 pid=237164 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=101 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996109.348:27479): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996109.350:27480): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996109.385:27481): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996109.386:27482): pid=237175 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996109.388:27483): pid=237175 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996109.431:27484): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996109.431:27485): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996109.435:27486): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237176 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996109.511:27487): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996109.512:27488): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996109.512:27489): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996109.518:27490): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996109.534:27491): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996109.535:27492): pid=237176 uid=0 auid=0 ses=101 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996109.537:27493): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237175 suid=0 rport=38230 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996109.538:27494): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996109.541:27495): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996109.541:27496): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996109.542:27497): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996109.542:27498): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996109.542:27499): pid=237164 uid=0 auid=0 ses=101 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237164 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.206:27500): pid=237209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996110.207:27501): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237209 suid=74 rport=38244 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996110.207:27502): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237209 suid=74 rport=38244 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996110.297:27503): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996110.297:27504): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996110.327:27505): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996110.327:27506): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237209 suid=74 rport=38244 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996110.329:27507): pid=237208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996110.329:27508): pid=237208 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=102 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996110.329:27508): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcf8ab740 a2=1 a3=0 items=0 ppid=38931 pid=237208 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=102 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996110.329:27508): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996110.332:27509): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996110.359:27510): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.360:27511): pid=237220 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996110.362:27512): pid=237220 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996110.404:27513): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996110.404:27514): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.406:27515): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996110.477:27516): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996110.477:27517): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996110.478:27518): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996110.483:27519): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996110.498:27520): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996110.499:27521): pid=237221 uid=0 auid=0 ses=102 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.501:27522): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237220 suid=0 rport=38244 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.502:27523): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237220 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996110.505:27524): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996110.505:27525): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996110.506:27526): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996110.506:27527): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996110.506:27528): pid=237208 uid=0 auid=0 ses=102 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.164:27529): pid=237254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996111.166:27530): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237254 suid=74 rport=38256 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996111.166:27531): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237254 suid=74 rport=38256 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996111.260:27532): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996111.260:27533): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996111.289:27534): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996111.290:27535): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237254 suid=74 rport=38256 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996111.292:27536): pid=237253 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996111.292:27537): pid=237253 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=103 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996111.292:27537): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb3e05230 a2=1 a3=0 items=0 ppid=38931 pid=237253 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=103 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996111.292:27537): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996111.294:27538): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996111.329:27539): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.331:27540): pid=237304 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996111.333:27541): pid=237304 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996111.374:27542): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996111.374:27543): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.376:27544): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237306 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996111.437:27545): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996111.437:27546): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996111.438:27547): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996111.442:27548): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996111.460:27549): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996111.460:27550): pid=237306 uid=0 auid=0 ses=103 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.464:27551): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237304 suid=0 rport=38256 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.465:27552): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996111.468:27553): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996111.468:27554): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996111.469:27555): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996111.469:27556): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996111.469:27557): pid=237253 uid=0 auid=0 ses=103 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237253 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996112.752:27558): pid=237440 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237440 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996112.754:27559): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237440 suid=74 rport=38266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996112.754:27560): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237440 suid=74 rport=38266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996112.834:27561): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996112.834:27562): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996112.856:27563): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996112.857:27564): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237440 suid=74 rport=38266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996112.861:27565): pid=237439 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996112.861:27566): pid=237439 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=104 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996112.861:27566): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6fa96c60 a2=1 a3=0 items=0 ppid=38931 pid=237439 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=104 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996112.861:27566): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996112.863:27567): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996112.900:27568): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996112.902:27569): pid=237442 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996112.904:27570): pid=237442 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996112.947:27571): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996112.947:27572): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996112.951:27573): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996113.027:27574): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996113.028:27575): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996113.030:27576): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996113.038:27577): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996113.049:27578): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996113.050:27579): pid=237443 uid=0 auid=0 ses=104 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.052:27580): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237442 suid=0 rport=38266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.053:27581): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237442 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996113.056:27582): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996113.057:27583): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996113.057:27584): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996113.058:27585): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.058:27586): pid=237439 uid=0 auid=0 ses=104 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237439 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.074:27587): pid=237459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996113.076:27588): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237459 suid=74 rport=38278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996113.076:27589): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237459 suid=74 rport=38278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996113.158:27590): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996113.158:27591): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996113.178:27592): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996113.179:27593): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237459 suid=74 rport=38278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996113.181:27594): pid=237458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996113.182:27595): pid=237458 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=105 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996113.182:27595): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1e953b10 a2=1 a3=0 items=0 ppid=38931 pid=237458 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=105 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996113.182:27595): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996113.183:27596): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996113.215:27597): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.216:27598): pid=237477 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996113.218:27599): pid=237477 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996113.260:27600): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996113.260:27601): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.262:27602): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996113.327:27603): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996113.327:27604): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996113.328:27605): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996113.333:27606): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996113.485:27607): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996113.705:27608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_northd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996113.711:27609): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996113.711:27610): pid=237478 uid=0 auid=0 ses=105 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.716:27611): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237477 suid=0 rport=38278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.717:27612): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996113.720:27613): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996113.720:27614): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996113.721:27615): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996113.721:27616): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996113.721:27617): pid=237458 uid=0 auid=0 ses=105 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996114.380:27618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.384:27619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.388:27620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.391:27621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.395:27622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.398:27623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.403:27624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996114.417:27625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.630:27626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.646:27627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.733:27628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.776:27629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.805:27630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996114.856:27631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996114.933:27632): pid=237789 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996114.935:27633): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237789 suid=74 rport=38290 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996114.935:27634): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237789 suid=74 rport=38290 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773996114.970:27635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996115.025:27636): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996115.025:27637): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996115.046:27638): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996115.046:27639): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237789 suid=74 rport=38290 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996115.049:27640): pid=237786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996115.049:27641): pid=237786 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=106 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996115.049:27641): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe8aca5910 a2=1 a3=0 items=0 ppid=38931 pid=237786 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=106 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996115.049:27641): proctitle=737368643A20726F6F74205B707269765D
type=SERVICE_STOP msg=audit(1773996115.050:27642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773996115.052:27643): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996115.119:27644): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.121:27645): pid=237792 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996115.122:27646): pid=237792 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996115.167:27647): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996115.167:27648): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.171:27649): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996115.242:27650): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996115.242:27651): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996115.243:27652): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996115.247:27653): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996115.261:27654): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996115.261:27655): pid=237796 uid=0 auid=0 ses=106 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.264:27656): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237792 suid=0 rport=38290 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.265:27657): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237792 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996115.268:27658): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996115.269:27659): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996115.269:27660): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996115.269:27661): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.270:27662): pid=237786 uid=0 auid=0 ses=106 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996115.901:27663): pid=237833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237833 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996115.903:27664): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237833 suid=74 rport=38300 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996115.903:27665): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=237833 suid=74 rport=38300 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996115.980:27666): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996115.980:27667): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996116.011:27668): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996116.011:27669): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237833 suid=74 rport=38300 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996116.014:27670): pid=237832 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996116.014:27671): pid=237832 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=107 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996116.014:27671): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3930c6b0 a2=1 a3=0 items=0 ppid=38931 pid=237832 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=107 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996116.014:27671): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996116.016:27672): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996116.044:27673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996116.048:27674): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996116.055:27675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996116.061:27676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996116.105:27677): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996116.107:27678): pid=237868 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996116.108:27679): pid=237868 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996116.152:27680): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996116.152:27681): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996116.157:27682): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996116.188:27683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996116.191:27684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996116.195:27685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996116.256:27686): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996116.257:27687): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996116.258:27688): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996116.264:27689): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996116.283:27690): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996116.283:27691): pid=237877 uid=0 auid=0 ses=107 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996116.286:27692): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=237868 suid=0 rport=38300 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996116.286:27693): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996116.290:27694): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996116.290:27695): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996116.291:27696): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996116.291:27697): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996116.291:27698): pid=237832 uid=0 auid=0 ses=107 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=237832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996116.377:27699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.392:27700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.425:27701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.447:27702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.521:27703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.561:27704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996116.585:27705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996116.948:27706): pid=238080 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238080 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996116.950:27707): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238080 suid=74 rport=38302 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996116.951:27708): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238080 suid=74 rport=38302 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996117.041:27709): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996117.041:27710): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996117.072:27711): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996117.072:27712): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238080 suid=74 rport=38302 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996117.075:27713): pid=238079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996117.075:27714): pid=238079 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=108 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996117.075:27714): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc236ecbb0 a2=1 a3=0 items=0 ppid=38931 pid=238079 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=108 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996117.075:27714): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996117.077:27715): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996117.114:27716): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.115:27717): pid=238082 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996117.117:27718): pid=238082 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996117.162:27719): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996117.162:27720): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.167:27721): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238083 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996117.250:27722): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996117.250:27723): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996117.253:27724): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996117.259:27725): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996117.276:27726): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996117.277:27727): pid=238083 uid=0 auid=0 ses=108 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.281:27728): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238082 suid=0 rport=38302 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.281:27729): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238082 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996117.285:27730): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996117.285:27731): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996117.286:27732): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996117.287:27733): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.287:27734): pid=238079 uid=0 auid=0 ses=108 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996117.954:27735): pid=238130 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996117.955:27736): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238130 suid=74 rport=45394 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996117.956:27737): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238130 suid=74 rport=45394 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996118.042:27738): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996118.042:27739): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996118.060:27740): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996118.060:27741): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238130 suid=74 rport=45394 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996118.063:27742): pid=238129 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996118.063:27743): pid=238129 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=109 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996118.063:27743): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc58c5f7f0 a2=1 a3=0 items=0 ppid=38931 pid=238129 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=109 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996118.063:27743): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996118.065:27744): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996118.093:27745): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.095:27746): pid=238141 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996118.096:27747): pid=238141 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996118.138:27748): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996118.138:27749): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.140:27750): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996118.196:27751): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996118.196:27752): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996118.197:27753): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996118.201:27754): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996118.213:27755): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996118.214:27756): pid=238142 uid=0 auid=0 ses=109 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.217:27757): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238141 suid=0 rport=45394 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.218:27758): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238141 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996118.220:27759): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996118.220:27760): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996118.221:27761): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996118.221:27762): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.221:27763): pid=238129 uid=0 auid=0 ses=109 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.844:27764): pid=238228 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996118.845:27765): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238228 suid=74 rport=45408 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996118.845:27766): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238228 suid=74 rport=45408 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996118.937:27767): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996118.937:27768): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996118.960:27769): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996118.961:27770): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238228 suid=74 rport=45408 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996118.963:27771): pid=238226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996118.964:27772): pid=238226 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=110 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996118.964:27772): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6683d310 a2=1 a3=0 items=0 ppid=38931 pid=238226 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=110 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996118.964:27772): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996118.965:27773): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996118.997:27774): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996118.998:27775): pid=238236 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996119.000:27776): pid=238236 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996119.044:27777): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996119.044:27778): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.047:27779): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238237 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996119.121:27780): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996119.121:27781): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996119.123:27782): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996119.127:27783): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996119.142:27784): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996119.143:27785): pid=238237 uid=0 auid=0 ses=110 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.146:27786): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238236 suid=0 rport=45408 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.146:27787): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996119.149:27788): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996119.149:27789): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996119.150:27790): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996119.150:27791): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.150:27792): pid=238226 uid=0 auid=0 ses=110 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.802:27793): pid=238330 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238330 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996119.803:27794): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238330 suid=74 rport=45420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996119.803:27795): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238330 suid=74 rport=45420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996119.885:27796): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996119.885:27797): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996119.915:27798): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996119.916:27799): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238330 suid=74 rport=45420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996119.919:27800): pid=238329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996119.919:27801): pid=238329 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=111 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996119.919:27801): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff20754ee0 a2=1 a3=0 items=0 ppid=38931 pid=238329 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=111 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996119.919:27801): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996119.921:27802): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996119.955:27803): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996119.958:27804): pid=238332 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996119.959:27805): pid=238332 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996120.003:27806): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996120.003:27807): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.005:27808): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996120.061:27809): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996120.061:27810): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996120.062:27811): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996120.066:27812): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996120.080:27813): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996120.080:27814): pid=238333 uid=0 auid=0 ses=111 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.084:27815): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238332 suid=0 rport=45420 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.084:27816): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238332 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996120.086:27817): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996120.087:27818): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996120.087:27819): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996120.087:27820): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.087:27821): pid=238329 uid=0 auid=0 ses=111 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.739:27822): pid=238380 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996120.740:27823): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238380 suid=74 rport=45424 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996120.740:27824): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238380 suid=74 rport=45424 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996120.832:27825): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996120.832:27826): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996120.853:27827): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996120.854:27828): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238380 suid=74 rport=45424 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996120.856:27829): pid=238379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996120.856:27830): pid=238379 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=112 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996120.856:27830): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4b8553a0 a2=1 a3=0 items=0 ppid=38931 pid=238379 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=112 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996120.856:27830): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996120.858:27831): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996120.886:27832): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.887:27833): pid=238382 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996120.888:27834): pid=238382 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996120.931:27835): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996120.931:27836): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996120.934:27837): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238383 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996121.012:27838): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996121.012:27839): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996121.013:27840): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996121.018:27841): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996121.036:27842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996121.050:27843): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996121.050:27844): pid=238383 uid=0 auid=0 ses=112 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.054:27845): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238382 suid=0 rport=45424 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.054:27846): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996121.057:27847): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996121.057:27848): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996121.058:27849): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996121.058:27850): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.058:27851): pid=238379 uid=0 auid=0 ses=112 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996121.206:27852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996121.630:27853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996121.683:27854): pid=238521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996121.684:27855): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238521 suid=74 rport=45432 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996121.684:27856): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238521 suid=74 rport=45432 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996121.771:27857): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996121.772:27858): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996121.795:27859): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996121.796:27860): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238521 suid=74 rport=45432 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996121.798:27861): pid=238520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996121.798:27862): pid=238520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=113 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996121.798:27862): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff1c761360 a2=1 a3=0 items=0 ppid=38931 pid=238520 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=113 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996121.798:27862): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996121.800:27863): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996121.828:27864): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.830:27865): pid=238536 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996121.831:27866): pid=238536 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996121.875:27867): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996121.875:27868): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.879:27869): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.931:27870): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238536 suid=0 rport=45432 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.933:27871): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996121.935:27872): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996121.935:27873): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996121.936:27874): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996121.937:27875): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996121.937:27876): pid=238520 uid=0 auid=0 ses=113 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996122.173:27877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996122.483:27878): pid=238646 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996122.484:27879): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238646 suid=74 rport=45448 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996122.485:27880): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238646 suid=74 rport=45448 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996122.577:27881): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996122.577:27882): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996122.607:27883): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996122.607:27884): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238646 suid=74 rport=45448 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996122.610:27885): pid=238634 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996122.610:27886): pid=238634 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=114 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996122.610:27886): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6e9f0e30 a2=1 a3=0 items=0 ppid=38931 pid=238634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=114 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996122.610:27886): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996122.612:27887): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996122.651:27888): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996122.653:27889): pid=238674 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996122.654:27890): pid=238674 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996122.697:27891): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996122.697:27892): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996122.700:27893): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996122.746:27894): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996122.746:27895): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996122.746:27896): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238674 suid=0 rport=45448 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996122.746:27897): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996122.749:27898): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996122.749:27899): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996122.750:27900): pid=238634 uid=0 auid=0 ses=114 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238634 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.323:27901): pid=238691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996123.324:27902): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238691 suid=74 rport=45460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996123.324:27903): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238691 suid=74 rport=45460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996123.415:27904): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996123.415:27905): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996123.445:27906): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996123.445:27907): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238691 suid=74 rport=45460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996123.448:27908): pid=238690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996123.448:27909): pid=238690 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=115 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996123.448:27909): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd6737db30 a2=1 a3=0 items=0 ppid=38931 pid=238690 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=115 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996123.448:27909): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996123.449:27910): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996123.487:27911): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.488:27912): pid=238708 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996123.490:27913): pid=238708 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996123.533:27914): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996123.533:27915): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.536:27916): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238710 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.580:27917): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238708 suid=0 rport=45460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.581:27918): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238708 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996123.583:27919): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996123.583:27920): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996123.584:27921): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996123.584:27922): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996123.584:27923): pid=238690 uid=0 auid=0 ses=115 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.100:27924): pid=238732 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238732 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996124.101:27925): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238732 suid=74 rport=45476 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996124.102:27926): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238732 suid=74 rport=45476 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996124.184:27927): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996124.184:27928): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996124.214:27929): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996124.214:27930): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238732 suid=74 rport=45476 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996124.217:27931): pid=238731 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996124.217:27932): pid=238731 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=116 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996124.217:27932): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc187d380 a2=1 a3=0 items=0 ppid=38931 pid=238731 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=116 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996124.217:27932): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996124.219:27933): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996124.259:27934): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.260:27935): pid=238734 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996124.262:27936): pid=238734 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996124.304:27937): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996124.304:27938): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.306:27939): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.346:27940): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238734 suid=0 rport=45476 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.348:27941): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996124.351:27942): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996124.351:27943): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996124.352:27944): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996124.352:27945): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.352:27946): pid=238731 uid=0 auid=0 ses=116 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238731 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996124.903:27947): pid=238775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238775 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996124.905:27948): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238775 suid=74 rport=45484 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996124.905:27949): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238775 suid=74 rport=45484 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996124.994:27950): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996124.994:27951): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996125.023:27952): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996125.024:27953): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238775 suid=74 rport=45484 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996125.027:27954): pid=238774 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996125.027:27955): pid=238774 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=117 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996125.027:27955): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb26407d0 a2=1 a3=0 items=0 ppid=38931 pid=238774 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=117 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996125.027:27955): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996125.029:27956): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996125.059:27957): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.061:27958): pid=238777 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996125.062:27959): pid=238777 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996125.105:27960): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996125.105:27961): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.107:27962): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238778 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.151:27963): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238777 suid=0 rport=45484 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.152:27964): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238777 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996125.155:27965): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996125.155:27966): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996125.156:27967): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996125.156:27968): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.157:27969): pid=238774 uid=0 auid=0 ses=117 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238774 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.751:27970): pid=238816 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238816 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996125.753:27971): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238816 suid=74 rport=45488 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996125.753:27972): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238816 suid=74 rport=45488 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996125.838:27973): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996125.838:27974): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996125.866:27975): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996125.866:27976): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238816 suid=74 rport=45488 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996125.869:27977): pid=238815 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996125.869:27978): pid=238815 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=118 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996125.869:27978): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb70fe100 a2=1 a3=0 items=0 ppid=38931 pid=238815 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=118 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996125.869:27978): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996125.871:27979): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996125.906:27980): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.908:27981): pid=238818 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996125.909:27982): pid=238818 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996125.952:27983): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996125.952:27984): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996125.953:27985): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.001:27986): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238818 suid=0 rport=45488 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.002:27987): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996126.005:27988): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996126.005:27989): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996126.006:27990): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996126.006:27991): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.006:27992): pid=238815 uid=0 auid=0 ses=118 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238815 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.552:27993): pid=238841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996126.553:27994): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238841 suid=74 rport=45498 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996126.553:27995): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238841 suid=74 rport=45498 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996126.634:27996): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996126.634:27997): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996126.663:27998): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996126.663:27999): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238841 suid=74 rport=45498 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996126.665:28000): pid=238840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996126.665:28001): pid=238840 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=119 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996126.665:28001): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc162356e0 a2=1 a3=0 items=0 ppid=38931 pid=238840 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=119 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996126.665:28001): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996126.667:28002): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996126.696:28003): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.697:28004): pid=238851 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996126.698:28005): pid=238851 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996126.740:28006): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996126.741:28007): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.742:28008): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238856 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.781:28009): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238851 suid=0 rport=45498 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.781:28010): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996126.784:28011): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996126.784:28012): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996126.785:28013): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996126.785:28014): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996126.785:28015): pid=238840 uid=0 auid=0 ses=119 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.353:28016): pid=238874 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238874 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996127.355:28017): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238874 suid=74 rport=53174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996127.355:28018): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238874 suid=74 rport=53174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996127.445:28019): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996127.445:28020): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996127.474:28021): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996127.475:28022): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238874 suid=74 rport=53174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996127.477:28023): pid=238873 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996127.478:28024): pid=238873 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=120 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996127.478:28024): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffe256e540 a2=1 a3=0 items=0 ppid=38931 pid=238873 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=120 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996127.478:28024): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996127.479:28025): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996127.515:28026): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.516:28027): pid=238880 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996127.518:28028): pid=238880 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996127.559:28029): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996127.560:28030): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.561:28031): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.609:28032): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238880 suid=0 rport=53174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.609:28033): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996127.612:28034): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996127.612:28035): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996127.613:28036): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996127.613:28037): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996127.613:28038): pid=238873 uid=0 auid=0 ses=120 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238873 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.224:28039): pid=238915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996128.225:28040): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238915 suid=74 rport=53176 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996128.225:28041): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=238915 suid=74 rport=53176 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996128.310:28042): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996128.310:28043): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996128.338:28044): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996128.338:28045): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238915 suid=74 rport=53176 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996128.340:28046): pid=238914 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996128.341:28047): pid=238914 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=121 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996128.341:28047): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd80a3ce0 a2=1 a3=0 items=0 ppid=38931 pid=238914 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=121 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996128.341:28047): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996128.342:28048): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996128.365:28049): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.367:28050): pid=238917 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996128.368:28051): pid=238917 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996128.411:28052): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996128.411:28053): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.412:28054): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.456:28055): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=238917 suid=0 rport=53176 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.456:28056): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238917 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996128.459:28057): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996128.459:28058): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996128.460:28059): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996128.460:28060): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996128.460:28061): pid=238914 uid=0 auid=0 ses=121 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=238914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.264:28062): pid=239038 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996129.266:28063): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239038 suid=74 rport=53186 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996129.266:28064): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239038 suid=74 rport=53186 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996129.348:28065): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996129.348:28066): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996129.373:28067): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996129.373:28068): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239038 suid=74 rport=53186 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996129.375:28069): pid=239029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996129.375:28070): pid=239029 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=122 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996129.375:28070): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6ec33b20 a2=1 a3=0 items=0 ppid=38931 pid=239029 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=122 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996129.375:28070): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996129.377:28071): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996129.408:28072): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.410:28073): pid=239087 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996129.411:28074): pid=239087 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996129.455:28075): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996129.455:28076): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.457:28077): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.498:28078): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239087 suid=0 rport=53186 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.500:28079): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996129.503:28080): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996129.503:28081): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996129.504:28082): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996129.504:28083): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996129.504:28084): pid=239029 uid=0 auid=0 ses=122 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239029 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.028:28085): pid=239126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996130.030:28086): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239126 suid=74 rport=53200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996130.030:28087): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239126 suid=74 rport=53200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996130.105:28088): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996130.105:28089): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996130.137:28090): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996130.137:28091): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239126 suid=74 rport=53200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996130.140:28092): pid=239125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996130.140:28093): pid=239125 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=123 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996130.140:28093): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffddbddda00 a2=1 a3=0 items=0 ppid=38931 pid=239125 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=123 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996130.140:28093): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996130.142:28094): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996130.181:28095): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.183:28096): pid=239129 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996130.185:28097): pid=239129 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996130.227:28098): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996130.227:28099): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.233:28100): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239130 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996130.269:28101): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996130.269:28102): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.270:28103): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239129 suid=0 rport=53200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.270:28104): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239129 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996130.272:28105): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996130.272:28106): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.273:28107): pid=239125 uid=0 auid=0 ses=123 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.296:28108): pid=239143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239143 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996130.297:28109): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=239143 suid=74 rport=41980 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996130.298:28110): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=239143 suid=74 rport=41980 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996130.752:28111): pid=239161 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239161 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996130.753:28112): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239161 suid=74 rport=53212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996130.753:28113): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239161 suid=74 rport=53212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996130.841:28114): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996130.841:28115): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996130.870:28116): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996130.870:28117): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239161 suid=74 rport=53212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996130.872:28118): pid=239160 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996130.872:28119): pid=239160 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=124 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996130.872:28119): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc1a188c0 a2=1 a3=0 items=0 ppid=38931 pid=239160 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=124 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996130.872:28119): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996130.874:28120): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996130.898:28121): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.899:28122): pid=239170 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996130.900:28123): pid=239170 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996130.942:28124): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996130.942:28125): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.944:28126): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239172 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996130.988:28127): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996130.988:28128): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.988:28129): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239170 suid=0 rport=53212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.988:28130): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996130.991:28131): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996130.991:28132): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996130.992:28133): pid=239160 uid=0 auid=0 ses=124 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.514:28134): pid=239227 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239227 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996131.515:28135): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239227 suid=74 rport=53224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996131.515:28136): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239227 suid=74 rport=53224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996131.607:28137): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996131.607:28138): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996131.636:28139): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996131.637:28140): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239227 suid=74 rport=53224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996131.639:28141): pid=239226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996131.639:28142): pid=239226 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=125 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996131.639:28142): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde176b8d0 a2=1 a3=0 items=0 ppid=38931 pid=239226 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=125 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996131.639:28142): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996131.641:28143): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996131.673:28144): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.675:28145): pid=239239 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996131.676:28146): pid=239239 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996131.720:28147): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996131.720:28148): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.723:28149): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239258 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996131.775:28150): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996131.775:28151): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.775:28152): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239239 suid=0 rport=53224 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.777:28153): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239239 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996131.780:28154): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996131.780:28155): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996131.780:28156): pid=239226 uid=0 auid=0 ses=125 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_AUTH msg=audit(1773996131.998:28157): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="solana" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996132.296:28158): pid=239370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996132.298:28159): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239370 suid=74 rport=53226 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996132.298:28160): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239370 suid=74 rport=53226 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996132.392:28161): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996132.392:28162): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996132.412:28163): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996132.413:28164): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239370 suid=74 rport=53226 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996132.415:28165): pid=239369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996132.415:28166): pid=239369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=126 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996132.415:28166): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdc3a9eea0 a2=1 a3=0 items=0 ppid=38931 pid=239369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=126 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996132.415:28166): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996132.416:28167): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996132.456:28168): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996132.458:28169): pid=239379 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996132.459:28170): pid=239379 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996132.502:28171): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996132.502:28172): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996132.504:28173): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996132.555:28174): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996132.555:28175): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996132.555:28176): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239379 suid=0 rport=53226 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996132.556:28177): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996132.558:28178): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996132.558:28179): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996132.559:28180): pid=239369 uid=0 auid=0 ses=126 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.102:28181): pid=239482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996133.103:28182): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239482 suid=74 rport=53242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996133.103:28183): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239482 suid=74 rport=53242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996133.177:28184): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996133.177:28185): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996133.195:28186): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996133.195:28187): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239482 suid=74 rport=53242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996133.198:28188): pid=239478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996133.198:28189): pid=239478 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=127 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996133.198:28189): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcb1caf370 a2=1 a3=0 items=0 ppid=38931 pid=239478 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=127 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996133.198:28189): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996133.200:28190): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996133.225:28191): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.226:28192): pid=239515 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996133.228:28193): pid=239515 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996133.271:28194): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996133.271:28195): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.274:28196): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.317:28197): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239515 suid=0 rport=53242 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.318:28198): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996133.321:28199): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996133.322:28200): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996133.323:28201): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996133.323:28202): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.323:28203): pid=239478 uid=0 auid=0 ses=127 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996133.896:28204): pid=239554 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239554 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996133.898:28205): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239554 suid=74 rport=53254 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996133.898:28206): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239554 suid=74 rport=53254 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996133.977:28207): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996133.977:28208): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996134.000:28209): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996134.000:28210): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239554 suid=74 rport=53254 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996134.002:28211): pid=239553 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996134.002:28212): pid=239553 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=128 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996134.002:28212): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd581235e0 a2=1 a3=0 items=0 ppid=38931 pid=239553 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=128 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996134.002:28212): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996134.004:28213): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996134.034:28214): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.035:28215): pid=239564 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996134.036:28216): pid=239564 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996134.079:28217): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996134.080:28218): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.083:28219): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996134.124:28220): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996134.124:28221): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.124:28222): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239564 suid=0 rport=53254 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.126:28223): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239564 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996134.129:28224): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996134.129:28225): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.130:28226): pid=239553 uid=0 auid=0 ses=128 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.695:28227): pid=239632 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996134.696:28228): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239632 suid=74 rport=53266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996134.696:28229): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239632 suid=74 rport=53266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996134.789:28230): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996134.789:28231): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996134.810:28232): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996134.811:28233): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239632 suid=74 rport=53266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996134.813:28234): pid=239631 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996134.813:28235): pid=239631 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=129 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996134.813:28235): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3407f4f0 a2=1 a3=0 items=0 ppid=38931 pid=239631 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=129 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996134.813:28235): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996134.814:28236): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996134.846:28237): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.847:28238): pid=239650 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996134.849:28239): pid=239650 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996134.892:28240): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996134.892:28241): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.893:28242): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996134.935:28243): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996134.935:28244): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.935:28245): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239650 suid=0 rport=53266 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.936:28246): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239650 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996134.938:28247): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996134.939:28248): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996134.940:28249): pid=239631 uid=0 auid=0 ses=129 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.460:28250): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239143 suid=74 rport=41980 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996135.461:28251): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239143 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996135.462:28252): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239127 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996135.462:28253): pid=239127 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996135.465:28254): pid=239680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996135.466:28255): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239680 suid=74 rport=53278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996135.466:28256): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239680 suid=74 rport=53278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996135.548:28257): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996135.548:28258): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996135.568:28259): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996135.568:28260): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239680 suid=74 rport=53278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996135.570:28261): pid=239679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996135.570:28262): pid=239679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=130 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996135.570:28262): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3a482380 a2=1 a3=0 items=0 ppid=38931 pid=239679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=130 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996135.570:28262): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996135.572:28263): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996135.598:28264): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.599:28265): pid=239682 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996135.600:28266): pid=239682 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996135.644:28267): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996135.644:28268): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.645:28269): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.685:28270): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239682 suid=0 rport=53278 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.685:28271): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996135.688:28272): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996135.688:28273): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996135.689:28274): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996135.689:28275): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996135.689:28276): pid=239679 uid=0 auid=0 ses=130 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.248:28277): pid=239756 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239756 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996136.250:28278): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239756 suid=74 rport=53286 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996136.250:28279): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239756 suid=74 rport=53286 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996136.335:28280): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996136.335:28281): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996136.364:28282): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996136.364:28283): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239756 suid=74 rport=53286 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996136.366:28284): pid=239755 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996136.367:28285): pid=239755 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=131 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996136.367:28285): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4d8052f0 a2=1 a3=0 items=0 ppid=38931 pid=239755 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=131 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996136.367:28285): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996136.368:28286): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996136.408:28287): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.409:28288): pid=239758 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996136.410:28289): pid=239758 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996136.454:28290): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996136.454:28291): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.457:28292): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.507:28293): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239758 suid=0 rport=53286 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.508:28294): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996136.510:28295): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996136.510:28296): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996136.511:28297): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996136.511:28298): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996136.511:28299): pid=239755 uid=0 auid=0 ses=131 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239755 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.072:28300): pid=239793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996137.073:28301): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239793 suid=74 rport=53294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996137.073:28302): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239793 suid=74 rport=53294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996137.158:28303): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996137.158:28304): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996137.179:28305): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996137.179:28306): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239793 suid=74 rport=53294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996137.181:28307): pid=239788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996137.182:28308): pid=239788 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=132 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996137.182:28308): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc7523040 a2=1 a3=0 items=0 ppid=38931 pid=239788 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=132 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996137.182:28308): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996137.183:28309): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996137.218:28310): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.220:28311): pid=239799 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996137.221:28312): pid=239799 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996137.265:28313): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996137.265:28314): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.267:28315): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239800 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.311:28316): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239799 suid=0 rport=53294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.312:28317): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996137.314:28318): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996137.315:28319): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996137.316:28320): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996137.316:28321): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.316:28322): pid=239788 uid=0 auid=0 ses=132 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996137.889:28323): pid=239829 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239829 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996137.890:28324): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239829 suid=74 rport=39614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996137.890:28325): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239829 suid=74 rport=39614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996137.982:28326): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996137.982:28327): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996138.044:28328): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996138.045:28329): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239829 suid=74 rport=39614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996138.048:28330): pid=239821 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996138.048:28331): pid=239821 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=133 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996138.048:28331): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdfacb78c0 a2=1 a3=0 items=0 ppid=38931 pid=239821 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=133 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996138.048:28331): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996138.050:28332): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996138.087:28333): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.088:28334): pid=239835 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996138.090:28335): pid=239835 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996138.134:28336): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996138.134:28337): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.135:28338): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.180:28339): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239835 suid=0 rport=39614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.181:28340): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996138.183:28341): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996138.183:28342): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996138.184:28343): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996138.184:28344): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.185:28345): pid=239821 uid=0 auid=0 ses=133 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.728:28346): pid=239855 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239855 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996138.730:28347): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239855 suid=74 rport=39616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996138.730:28348): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239855 suid=74 rport=39616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996138.808:28349): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996138.808:28350): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996138.838:28351): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996138.838:28352): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239855 suid=74 rport=39616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996138.841:28353): pid=239854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996138.841:28354): pid=239854 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=134 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996138.841:28354): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6a437ad0 a2=1 a3=0 items=0 ppid=38931 pid=239854 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=134 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996138.841:28354): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996138.842:28355): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996138.863:28356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996138.867:28357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996138.871:28358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996138.876:28359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996138.902:28360): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.904:28361): pid=239896 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996138.906:28362): pid=239896 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996138.947:28363): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996138.947:28364): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.950:28365): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239918 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.995:28366): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239896 suid=0 rport=39616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996138.995:28367): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996138.999:28368): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996138.999:28369): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996139.000:28370): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996139.000:28371): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.000:28372): pid=239854 uid=0 auid=0 ses=134 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996139.056:28373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996139.118:28374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996139.172:28375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996139.358:28376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996139.578:28377): pid=239984 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239984 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996139.579:28378): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239984 suid=74 rport=39630 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996139.579:28379): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=239984 suid=74 rport=39630 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996139.667:28380): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996139.667:28381): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996139.697:28382): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996139.697:28383): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239984 suid=74 rport=39630 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996139.699:28384): pid=239983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996139.699:28385): pid=239983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=135 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996139.699:28385): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7f439b20 a2=1 a3=0 items=0 ppid=38931 pid=239983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=135 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996139.699:28385): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996139.701:28386): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996139.737:28387): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.738:28388): pid=239986 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996139.740:28389): pid=239986 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996139.784:28390): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996139.784:28391): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.786:28392): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.834:28393): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=239986 suid=0 rport=39630 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.836:28394): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996139.838:28395): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996139.839:28396): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996139.840:28397): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996139.840:28398): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996139.840:28399): pid=239983 uid=0 auid=0 ses=135 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=239983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.454:28400): pid=240025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996140.455:28401): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240025 suid=74 rport=39632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996140.456:28402): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240025 suid=74 rport=39632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996140.546:28403): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996140.546:28404): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996140.576:28405): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996140.576:28406): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240025 suid=74 rport=39632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996140.579:28407): pid=240024 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996140.579:28408): pid=240024 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=136 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996140.579:28408): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed9838e30 a2=1 a3=0 items=0 ppid=38931 pid=240024 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=136 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996140.579:28408): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996140.580:28409): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996140.612:28410): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.614:28411): pid=240027 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996140.615:28412): pid=240027 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996140.657:28413): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996140.658:28414): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.659:28415): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.710:28416): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240027 suid=0 rport=39632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.711:28417): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996140.713:28418): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996140.713:28419): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996140.714:28420): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996140.714:28421): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996140.714:28422): pid=240024 uid=0 auid=0 ses=136 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240024 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.288:28423): pid=240124 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240124 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996141.289:28424): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240124 suid=74 rport=39640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996141.289:28425): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240124 suid=74 rport=39640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996141.378:28426): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996141.378:28427): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996141.407:28428): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996141.407:28429): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240124 suid=74 rport=39640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996141.410:28430): pid=240123 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996141.410:28431): pid=240123 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=137 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996141.410:28431): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5bff9450 a2=1 a3=0 items=0 ppid=38931 pid=240123 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=137 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996141.410:28431): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996141.412:28432): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996141.443:28433): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.445:28434): pid=240128 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996141.446:28435): pid=240128 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996141.490:28436): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996141.490:28437): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.493:28438): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240153 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.540:28439): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240128 suid=0 rport=39640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.542:28440): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996141.544:28441): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996141.545:28442): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996141.546:28443): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996141.546:28444): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996141.547:28445): pid=240123 uid=0 auid=0 ses=137 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240123 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.120:28446): pid=240198 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996142.121:28447): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240198 suid=74 rport=39642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996142.123:28448): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240198 suid=74 rport=39642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996142.214:28449): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996142.214:28450): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996142.244:28451): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996142.244:28452): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240198 suid=74 rport=39642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996142.247:28453): pid=240197 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996142.247:28454): pid=240197 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=138 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996142.247:28454): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc877d44e0 a2=1 a3=0 items=0 ppid=38931 pid=240197 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=138 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996142.247:28454): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996142.249:28455): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996142.282:28456): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.283:28457): pid=240231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996142.285:28458): pid=240231 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996142.327:28459): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996142.328:28460): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.329:28461): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.380:28462): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240231 suid=0 rport=39642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.381:28463): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240231 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996142.384:28464): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996142.384:28465): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996142.385:28466): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996142.386:28467): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.386:28468): pid=240197 uid=0 auid=0 ses=138 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240197 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996142.961:28469): pid=240325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996142.962:28470): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240325 suid=74 rport=39656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996142.963:28471): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240325 suid=74 rport=39656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996143.067:28472): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996143.067:28473): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996143.098:28474): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996143.098:28475): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240325 suid=74 rport=39656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996143.101:28476): pid=240324 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996143.101:28477): pid=240324 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=139 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996143.101:28477): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3ba31630 a2=1 a3=0 items=0 ppid=38931 pid=240324 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=139 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996143.101:28477): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996143.103:28478): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996143.133:28479): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.134:28480): pid=240335 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996143.136:28481): pid=240335 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996143.178:28482): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996143.178:28483): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.180:28484): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.235:28485): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240335 suid=0 rport=39656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.239:28486): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240335 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996143.241:28487): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996143.241:28488): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996143.242:28489): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996143.242:28490): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.242:28491): pid=240324 uid=0 auid=0 ses=139 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240324 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.797:28492): pid=240358 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996143.799:28493): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240358 suid=74 rport=39662 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996143.799:28494): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240358 suid=74 rport=39662 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996143.887:28495): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996143.887:28496): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996143.916:28497): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996143.917:28498): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240358 suid=74 rport=39662 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996143.920:28499): pid=240357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996143.920:28500): pid=240357 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=140 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996143.920:28500): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3107cfa0 a2=1 a3=0 items=0 ppid=38931 pid=240357 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=140 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996143.920:28500): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996143.922:28501): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996143.960:28502): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996143.961:28503): pid=240367 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996143.963:28504): pid=240367 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996144.006:28505): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996144.006:28506): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.009:28507): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996144.060:28508): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996144.060:28509): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.061:28510): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240367 suid=0 rport=39662 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.061:28511): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240367 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996144.064:28512): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996144.064:28513): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.065:28514): pid=240357 uid=0 auid=0 ses=140 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.701:28515): pid=240401 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240401 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996144.702:28516): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240401 suid=74 rport=39666 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996144.702:28517): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240401 suid=74 rport=39666 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996144.790:28518): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996144.790:28519): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996144.814:28520): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996144.814:28521): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240401 suid=74 rport=39666 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996144.817:28522): pid=240400 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996144.817:28523): pid=240400 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=141 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996144.817:28523): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdaf620ec0 a2=1 a3=0 items=0 ppid=38931 pid=240400 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=141 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996144.817:28523): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996144.819:28524): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996144.841:28525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996144.846:28526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996144.850:28527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996144.853:28528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996144.857:28529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996144.865:28530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996144.890:28531): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.891:28532): pid=240450 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996144.892:28533): pid=240450 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996144.935:28534): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996144.936:28535): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996144.937:28536): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996144.993:28537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996145.000:28538): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240450 suid=0 rport=39666 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.001:28539): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996145.007:28540): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996145.007:28541): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996145.008:28542): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996145.008:28543): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.008:28544): pid=240400 uid=0 auid=0 ses=141 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996145.069:28545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.094:28546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.184:28547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.222:28548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.328:28549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.370:28550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.377:28551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.503:28552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996145.571:28553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996145.583:28554): pid=240657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996145.585:28555): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240657 suid=74 rport=39676 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996145.585:28556): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240657 suid=74 rport=39676 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996145.666:28557): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996145.666:28558): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996145.697:28559): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996145.697:28560): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240657 suid=74 rport=39676 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996145.700:28561): pid=240656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996145.700:28562): pid=240656 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=142 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996145.700:28562): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd653482e0 a2=1 a3=0 items=0 ppid=38931 pid=240656 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=142 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996145.700:28562): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996145.702:28563): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996145.744:28564): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.745:28565): pid=240659 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996145.747:28566): pid=240659 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996145.792:28567): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996145.793:28568): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.797:28569): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240660 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996145.856:28570): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996145.856:28571): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.857:28572): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240659 suid=0 rport=39676 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.858:28573): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996145.861:28574): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996145.861:28575): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996145.862:28576): pid=240656 uid=0 auid=0 ses=142 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.403:28577): pid=240700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996146.404:28578): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240700 suid=74 rport=39686 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996146.405:28579): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240700 suid=74 rport=39686 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996146.487:28580): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996146.487:28581): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996146.518:28582): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996146.519:28583): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240700 suid=74 rport=39686 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996146.523:28584): pid=240699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996146.523:28585): pid=240699 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=143 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996146.523:28585): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc01c9fca0 a2=1 a3=0 items=0 ppid=38931 pid=240699 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=143 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996146.523:28585): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996146.525:28586): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996146.554:28587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.560:28588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.565:28589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.570:28590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.576:28591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.584:28592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996146.612:28593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996146.638:28594): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.639:28595): pid=240821 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996146.641:28596): pid=240821 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996146.684:28597): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996146.684:28598): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.686:28599): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.728:28600): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240821 suid=0 rport=39686 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.729:28601): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240821 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996146.732:28602): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996146.732:28603): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996146.732:28604): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996146.732:28605): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996146.732:28606): pid=240699 uid=0 auid=0 ses=143 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996146.951:28607): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996146.977:28608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996146.987:28609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996147.003:28610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996147.070:28611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996147.124:28612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996147.189:28613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996147.347:28614): pid=240958 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996147.349:28615): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240958 suid=74 rport=50094 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996147.349:28616): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=240958 suid=74 rport=50094 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996147.429:28617): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996147.429:28618): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996147.460:28619): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996147.460:28620): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240958 suid=74 rport=50094 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996147.463:28621): pid=240956 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996147.463:28622): pid=240956 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=144 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996147.463:28622): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe98239c40 a2=1 a3=0 items=0 ppid=38931 pid=240956 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=144 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996147.463:28622): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996147.464:28623): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996147.495:28624): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996147.497:28625): pid=240960 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996147.498:28626): pid=240960 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996147.543:28627): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996147.543:28628): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996147.548:28629): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996147.605:28630): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=240960 suid=0 rport=50094 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996147.606:28631): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996147.609:28632): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996147.609:28633): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996147.610:28634): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996147.610:28635): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996147.610:28636): pid=240956 uid=0 auid=0 ses=144 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=240956 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.169:28637): pid=241045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996148.170:28638): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241045 suid=74 rport=50110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996148.171:28639): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241045 suid=74 rport=50110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996148.268:28640): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996148.268:28641): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996148.291:28642): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996148.292:28643): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241045 suid=74 rport=50110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996148.294:28644): pid=241043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996148.294:28645): pid=241043 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=145 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996148.294:28645): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf27f5d30 a2=1 a3=0 items=0 ppid=38931 pid=241043 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=145 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996148.294:28645): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996148.296:28646): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996148.324:28647): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.325:28648): pid=241047 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996148.326:28649): pid=241047 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996148.368:28650): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996148.368:28651): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.370:28652): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996148.405:28653): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996148.406:28654): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.406:28655): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241047 suid=0 rport=50110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.406:28656): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996148.409:28657): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996148.409:28658): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.410:28659): pid=241043 uid=0 auid=0 ses=145 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996148.983:28660): pid=241077 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241077 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996148.984:28661): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241077 suid=74 rport=50114 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996148.984:28662): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241077 suid=74 rport=50114 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996149.073:28663): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996149.073:28664): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996149.096:28665): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996149.097:28666): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241077 suid=74 rport=50114 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996149.099:28667): pid=241076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996149.099:28668): pid=241076 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=146 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996149.099:28668): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc632a7580 a2=1 a3=0 items=0 ppid=38931 pid=241076 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=146 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996149.099:28668): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996149.101:28669): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996149.134:28670): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.136:28671): pid=241087 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996149.137:28672): pid=241087 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996149.181:28673): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996149.181:28674): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.183:28675): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241096 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.223:28676): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241087 suid=0 rport=50114 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.223:28677): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996149.225:28678): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996149.226:28679): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996149.226:28680): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996149.226:28681): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.226:28682): pid=241076 uid=0 auid=0 ses=146 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.789:28683): pid=241167 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241167 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996149.790:28684): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241167 suid=74 rport=50128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996149.790:28685): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241167 suid=74 rport=50128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996149.879:28686): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996149.879:28687): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996149.897:28688): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996149.897:28689): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241167 suid=74 rport=50128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996149.900:28690): pid=241166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996149.900:28691): pid=241166 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=147 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996149.900:28691): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc3067bf10 a2=1 a3=0 items=0 ppid=38931 pid=241166 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=147 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996149.900:28691): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996149.902:28692): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996149.938:28693): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.940:28694): pid=241169 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996149.941:28695): pid=241169 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996149.985:28696): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996149.985:28697): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996149.989:28698): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241173 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996150.037:28699): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996150.037:28700): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.037:28701): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241169 suid=0 rport=50128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.039:28702): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996150.042:28703): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996150.042:28704): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.043:28705): pid=241166 uid=0 auid=0 ses=147 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.562:28706): pid=241215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996150.564:28707): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241215 suid=74 rport=50132 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996150.564:28708): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241215 suid=74 rport=50132 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996150.650:28709): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996150.650:28710): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996150.670:28711): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996150.670:28712): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241215 suid=74 rport=50132 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996150.673:28713): pid=241214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996150.673:28714): pid=241214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=148 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996150.673:28714): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe48eb0480 a2=1 a3=0 items=0 ppid=38931 pid=241214 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=148 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996150.673:28714): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996150.675:28715): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996150.711:28716): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.712:28717): pid=241219 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241219 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996150.714:28718): pid=241219 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996150.756:28719): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996150.756:28720): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.758:28721): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241221 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.798:28722): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241219 suid=0 rport=50132 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.798:28723): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241219 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996150.801:28724): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996150.801:28725): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996150.802:28726): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996150.802:28727): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996150.802:28728): pid=241214 uid=0 auid=0 ses=148 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.392:28729): pid=241255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241255 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996151.393:28730): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241255 suid=74 rport=50142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996151.393:28731): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241255 suid=74 rport=50142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996151.474:28732): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996151.475:28733): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996151.505:28734): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996151.505:28735): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241255 suid=74 rport=50142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996151.507:28736): pid=241251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996151.508:28737): pid=241251 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=149 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996151.508:28737): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc3854e920 a2=1 a3=0 items=0 ppid=38931 pid=241251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=149 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996151.508:28737): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996151.509:28738): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996151.529:28739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996151.551:28740): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.552:28741): pid=241275 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996151.554:28742): pid=241275 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996151.597:28743): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996151.597:28744): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.598:28745): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241309 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.655:28746): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241275 suid=0 rport=50142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.656:28747): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996151.658:28748): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996151.659:28749): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996151.660:28750): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996151.660:28751): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996151.660:28752): pid=241251 uid=0 auid=0 ses=149 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996151.718:28753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996152.178:28754): pid=241364 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241364 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996152.180:28755): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241364 suid=74 rport=50148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996152.180:28756): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241364 suid=74 rport=50148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996152.271:28757): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996152.271:28758): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996152.305:28759): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996152.305:28760): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241364 suid=74 rport=50148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996152.308:28761): pid=241359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996152.308:28762): pid=241359 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=150 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996152.308:28762): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc4469ce0 a2=1 a3=0 items=0 ppid=38931 pid=241359 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=150 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996152.308:28762): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996152.310:28763): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996152.335:28764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996152.357:28765): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996152.359:28766): pid=241419 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996152.361:28767): pid=241419 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996152.405:28768): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996152.405:28769): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996152.409:28770): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996152.455:28771): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241419 suid=0 rport=50148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996152.456:28772): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996152.459:28773): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996152.460:28774): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996152.460:28775): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996152.461:28776): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996152.461:28777): pid=241359 uid=0 auid=0 ses=150 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996152.900:28778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996152.969:28779): pid=241575 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241575 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996152.970:28780): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241575 suid=74 rport=50160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996152.970:28781): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241575 suid=74 rport=50160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996153.052:28782): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996153.052:28783): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996153.074:28784): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996153.074:28785): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241575 suid=74 rport=50160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996153.077:28786): pid=241574 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996153.077:28787): pid=241574 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=151 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996153.077:28787): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe663ac9c0 a2=1 a3=0 items=0 ppid=38931 pid=241574 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=151 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996153.077:28787): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996153.078:28788): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996153.136:28789): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.137:28790): pid=241577 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996153.138:28791): pid=241577 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996153.182:28792): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996153.182:28793): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.184:28794): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241578 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.235:28795): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241577 suid=0 rport=50160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.236:28796): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996153.238:28797): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996153.238:28798): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996153.239:28799): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996153.239:28800): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.239:28801): pid=241574 uid=0 auid=0 ses=151 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241574 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.775:28802): pid=241616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996153.775:28803): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241616 suid=74 rport=50168 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996153.775:28804): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241616 suid=74 rport=50168 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996153.852:28805): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996153.852:28806): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996153.882:28807): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996153.882:28808): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241616 suid=74 rport=50168 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996153.884:28809): pid=241615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996153.884:28810): pid=241615 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=152 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996153.884:28810): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc10005430 a2=1 a3=0 items=0 ppid=38931 pid=241615 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=152 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996153.884:28810): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996153.886:28811): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996153.918:28812): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.919:28813): pid=241618 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996153.920:28814): pid=241618 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996153.963:28815): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996153.963:28816): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996153.965:28817): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.010:28818): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241618 suid=0 rport=50168 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.011:28819): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996154.013:28820): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996154.014:28821): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996154.016:28822): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996154.016:28823): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.016:28824): pid=241615 uid=0 auid=0 ses=152 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.523:28825): pid=241657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996154.524:28826): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241657 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996154.525:28827): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241657 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996154.601:28828): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996154.601:28829): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996154.630:28830): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996154.631:28831): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241657 suid=74 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996154.633:28832): pid=241656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996154.634:28833): pid=241656 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=153 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996154.634:28833): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8cec29a0 a2=1 a3=0 items=0 ppid=38931 pid=241656 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=153 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996154.634:28833): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996154.635:28834): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996154.667:28835): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.668:28836): pid=241661 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996154.670:28837): pid=241661 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996154.712:28838): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996154.712:28839): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.714:28840): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241662 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.754:28841): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241661 suid=0 rport=50174 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.754:28842): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241661 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996154.757:28843): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996154.758:28844): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996154.758:28845): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996154.758:28846): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996154.759:28847): pid=241656 uid=0 auid=0 ses=153 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.258:28848): pid=241683 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996155.260:28849): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241683 suid=74 rport=50182 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996155.260:28850): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241683 suid=74 rport=50182 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996155.395:28851): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996155.395:28852): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996155.423:28853): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996155.423:28854): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241683 suid=74 rport=50182 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996155.425:28855): pid=241678 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996155.425:28856): pid=241678 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=154 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996155.425:28856): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee59ef730 a2=1 a3=0 items=0 ppid=38931 pid=241678 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=154 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996155.425:28856): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996155.426:28857): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996155.452:28858): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.453:28859): pid=241694 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996155.455:28860): pid=241694 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996155.497:28861): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996155.498:28862): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.499:28863): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241695 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.545:28864): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241694 suid=0 rport=50182 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.546:28865): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996155.549:28866): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996155.549:28867): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996155.550:28868): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996155.550:28869): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996155.550:28870): pid=241678 uid=0 auid=0 ses=154 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241678 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.156:28871): pid=241717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241717 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996156.158:28872): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241717 suid=74 rport=50190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996156.159:28873): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241717 suid=74 rport=50190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996156.251:28874): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996156.251:28875): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996156.282:28876): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996156.283:28877): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241717 suid=74 rport=50190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996156.286:28878): pid=241716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996156.286:28879): pid=241716 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=155 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996156.286:28879): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5ff4c2e0 a2=1 a3=0 items=0 ppid=38931 pid=241716 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=155 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996156.286:28879): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996156.289:28880): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996156.320:28881): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.322:28882): pid=241727 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996156.323:28883): pid=241727 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996156.365:28884): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996156.365:28885): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.367:28886): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996156.416:28887): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996156.416:28888): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.417:28889): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241727 suid=0 rport=50190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.417:28890): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996156.419:28891): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996156.420:28892): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996156.420:28893): pid=241716 uid=0 auid=0 ses=155 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.030:28894): pid=241758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996157.031:28895): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241758 suid=74 rport=50200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996157.031:28896): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241758 suid=74 rport=50200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996157.103:28897): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996157.103:28898): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996157.131:28899): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996157.131:28900): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241758 suid=74 rport=50200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996157.134:28901): pid=241757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996157.134:28902): pid=241757 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=156 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996157.134:28902): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb368a5a0 a2=1 a3=0 items=0 ppid=38931 pid=241757 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=156 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996157.134:28902): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996157.135:28903): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996157.171:28904): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.172:28905): pid=241760 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996157.174:28906): pid=241760 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996157.216:28907): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996157.216:28908): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.217:28909): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241761 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996157.263:28910): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996157.263:28911): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.263:28912): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241760 suid=0 rport=50200 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.263:28913): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996157.265:28914): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996157.267:28915): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.268:28916): pid=241757 uid=0 auid=0 ses=156 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.822:28917): pid=241799 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241799 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996157.824:28918): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241799 suid=74 rport=53704 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996157.824:28919): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241799 suid=74 rport=53704 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996157.905:28920): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996157.905:28921): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996157.934:28922): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996157.935:28923): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241799 suid=74 rport=53704 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996157.937:28924): pid=241798 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996157.937:28925): pid=241798 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=157 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996157.937:28925): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff8a8e0aa0 a2=1 a3=0 items=0 ppid=38931 pid=241798 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=157 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996157.937:28925): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996157.939:28926): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996157.975:28927): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996157.976:28928): pid=241802 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996157.978:28929): pid=241802 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996158.021:28930): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996158.021:28931): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.022:28932): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.071:28933): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241802 suid=0 rport=53704 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.072:28934): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996158.075:28935): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996158.075:28936): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996158.076:28937): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996158.076:28938): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.076:28939): pid=241798 uid=0 auid=0 ses=157 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241798 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.637:28940): pid=241835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996158.638:28941): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241835 suid=74 rport=53708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996158.638:28942): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241835 suid=74 rport=53708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996158.721:28943): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996158.721:28944): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996158.750:28945): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996158.750:28946): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241835 suid=74 rport=53708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996158.752:28947): pid=241834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996158.752:28948): pid=241834 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=158 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996158.752:28948): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf6f0f750 a2=1 a3=0 items=0 ppid=38931 pid=241834 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=158 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996158.752:28948): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996158.754:28949): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996158.788:28950): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.790:28951): pid=241845 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996158.791:28952): pid=241845 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996158.834:28953): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996158.834:28954): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.835:28955): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241846 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.869:28956): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241845 suid=0 rport=53708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.869:28957): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241845 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996158.872:28958): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996158.872:28959): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996158.873:28960): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996158.873:28961): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996158.873:28962): pid=241834 uid=0 auid=0 ses=158 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.403:28963): pid=241871 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996159.404:28964): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241871 suid=74 rport=53722 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996159.405:28965): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241871 suid=74 rport=53722 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996159.495:28966): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996159.495:28967): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996159.524:28968): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996159.524:28969): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241871 suid=74 rport=53722 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996159.526:28970): pid=241867 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996159.526:28971): pid=241867 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=159 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996159.526:28971): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea7490df0 a2=1 a3=0 items=0 ppid=38931 pid=241867 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=159 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996159.526:28971): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996159.528:28972): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996159.560:28973): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.561:28974): pid=241878 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996159.562:28975): pid=241878 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996159.605:28976): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996159.605:28977): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.606:28978): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996159.651:28979): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996159.651:28980): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.652:28981): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241878 suid=0 rport=53722 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.652:28982): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996159.654:28983): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996159.655:28984): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996159.656:28985): pid=241867 uid=0 auid=0 ses=159 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241867 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.194:28986): pid=241901 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241901 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996160.195:28987): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241901 suid=74 rport=53728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996160.195:28988): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241901 suid=74 rport=53728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996160.275:28989): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996160.275:28990): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996160.306:28991): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996160.307:28992): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241901 suid=74 rport=53728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996160.310:28993): pid=241900 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996160.310:28994): pid=241900 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=160 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996160.310:28994): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcea9a550 a2=1 a3=0 items=0 ppid=38931 pid=241900 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=160 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996160.310:28994): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996160.311:28995): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996160.340:28996): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.342:28997): pid=241903 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996160.343:28998): pid=241903 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996160.385:28999): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996160.385:29000): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.388:29001): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.430:29002): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241903 suid=0 rport=53728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.431:29003): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996160.433:29004): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996160.433:29005): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996160.433:29006): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996160.433:29007): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.434:29008): pid=241900 uid=0 auid=0 ses=160 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996160.998:29009): pid=241942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996161.000:29010): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241942 suid=74 rport=53740 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996161.000:29011): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=241942 suid=74 rport=53740 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996161.082:29012): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996161.082:29013): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996161.111:29014): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996161.112:29015): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241942 suid=74 rport=53740 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996161.114:29016): pid=241941 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996161.114:29017): pid=241941 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=161 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996161.114:29017): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd1b202f0 a2=1 a3=0 items=0 ppid=38931 pid=241941 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=161 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996161.114:29017): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996161.116:29018): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996161.152:29019): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.153:29020): pid=241944 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996161.155:29021): pid=241944 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996161.198:29022): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996161.198:29023): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.200:29024): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241945 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.243:29025): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=241944 suid=0 rport=53740 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.243:29026): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996161.245:29027): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996161.246:29028): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996161.246:29029): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996161.247:29030): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.247:29031): pid=241941 uid=0 auid=0 ses=161 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=241941 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.801:29032): pid=242073 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242073 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996161.802:29033): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242073 suid=74 rport=53746 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996161.803:29034): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242073 suid=74 rport=53746 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996161.884:29035): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996161.884:29036): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996161.913:29037): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996161.914:29038): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242073 suid=74 rport=53746 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996161.917:29039): pid=242071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996161.917:29040): pid=242071 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=162 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996161.917:29040): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5d2f7030 a2=1 a3=0 items=0 ppid=38931 pid=242071 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=162 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996161.917:29040): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996161.918:29041): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996161.953:29042): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996161.954:29043): pid=242075 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996161.956:29044): pid=242075 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996161.999:29045): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996161.999:29046): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.002:29047): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.047:29048): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242075 suid=0 rport=53746 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.048:29049): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996162.051:29050): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996162.051:29051): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996162.052:29052): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996162.052:29053): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.052:29054): pid=242071 uid=0 auid=0 ses=162 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.560:29055): pid=242138 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996162.561:29056): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242138 suid=74 rport=53762 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996162.561:29057): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242138 suid=74 rport=53762 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996162.646:29058): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996162.646:29059): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996162.675:29060): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996162.676:29061): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242138 suid=74 rport=53762 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996162.678:29062): pid=242135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996162.678:29063): pid=242135 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=163 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996162.678:29063): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff2f9a2ed0 a2=1 a3=0 items=0 ppid=38931 pid=242135 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=163 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996162.678:29063): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996162.680:29064): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996162.717:29065): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.718:29066): pid=242168 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996162.720:29067): pid=242168 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996162.762:29068): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996162.763:29069): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.764:29070): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242189 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996162.803:29071): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996162.803:29072): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.803:29073): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242168 suid=0 rport=53762 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.803:29074): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996162.806:29075): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996162.806:29076): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996162.807:29077): pid=242135 uid=0 auid=0 ses=163 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.357:29078): pid=242286 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242286 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996163.358:29079): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242286 suid=74 rport=53766 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996163.358:29080): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242286 suid=74 rport=53766 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996163.448:29081): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996163.448:29082): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996163.470:29083): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996163.471:29084): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242286 suid=74 rport=53766 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996163.473:29085): pid=242285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996163.473:29086): pid=242285 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=164 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996163.473:29086): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcc5255e30 a2=1 a3=0 items=0 ppid=38931 pid=242285 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=164 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996163.473:29086): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996163.474:29087): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996163.497:29088): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.498:29089): pid=242299 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996163.499:29090): pid=242299 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996163.542:29091): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996163.542:29092): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.543:29093): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.575:29094): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242299 suid=0 rport=53766 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.576:29095): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996163.577:29096): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996163.578:29097): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996163.578:29098): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996163.578:29099): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996163.579:29100): pid=242285 uid=0 auid=0 ses=164 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.148:29101): pid=242334 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242334 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996164.149:29102): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242334 suid=74 rport=53776 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996164.150:29103): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242334 suid=74 rport=53776 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996164.241:29104): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996164.241:29105): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996164.262:29106): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996164.262:29107): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242334 suid=74 rport=53776 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996164.264:29108): pid=242333 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996164.264:29109): pid=242333 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=165 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996164.264:29109): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff763584a0 a2=1 a3=0 items=0 ppid=38931 pid=242333 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=165 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996164.264:29109): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996164.266:29110): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996164.293:29111): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.295:29112): pid=242385 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996164.296:29113): pid=242385 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996164.339:29114): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996164.339:29115): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.341:29116): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996164.377:29117): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996164.377:29118): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.377:29119): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242385 suid=0 rport=53776 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.379:29120): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242385 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996164.381:29121): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996164.382:29122): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.383:29123): pid=242333 uid=0 auid=0 ses=165 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242333 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996164.966:29124): pid=242433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996164.967:29125): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242433 suid=74 rport=53786 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996164.967:29126): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242433 suid=74 rport=53786 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996165.064:29127): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996165.064:29128): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996165.093:29129): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996165.094:29130): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242433 suid=74 rport=53786 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996165.098:29131): pid=242432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996165.098:29132): pid=242432 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=166 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996165.098:29132): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff5bd05cb0 a2=1 a3=0 items=0 ppid=38931 pid=242432 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=166 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996165.098:29132): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996165.100:29133): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996165.130:29134): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.132:29135): pid=242435 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996165.133:29136): pid=242435 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996165.176:29137): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996165.176:29138): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.177:29139): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.210:29140): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242435 suid=0 rport=53786 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.211:29141): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996165.213:29142): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996165.214:29143): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996165.215:29144): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996165.215:29145): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.215:29146): pid=242432 uid=0 auid=0 ses=166 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.803:29147): pid=242470 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996165.805:29148): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242470 suid=74 rport=53794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996165.805:29149): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242470 suid=74 rport=53794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996165.898:29150): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996165.898:29151): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996165.919:29152): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996165.920:29153): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242470 suid=74 rport=53794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996165.922:29154): pid=242469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996165.922:29155): pid=242469 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=167 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996165.922:29155): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc89824030 a2=1 a3=0 items=0 ppid=38931 pid=242469 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=167 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996165.922:29155): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996165.924:29156): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996165.952:29157): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.953:29158): pid=242480 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996165.955:29159): pid=242480 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996165.998:29160): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996165.998:29161): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996165.999:29162): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996166.041:29163): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996166.042:29164): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.042:29165): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242480 suid=0 rport=53794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.042:29166): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996166.045:29167): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996166.045:29168): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.046:29169): pid=242469 uid=0 auid=0 ses=167 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242469 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.610:29170): pid=242507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996166.611:29171): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242507 suid=74 rport=53798 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996166.611:29172): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242507 suid=74 rport=53798 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996166.702:29173): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996166.702:29174): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996166.732:29175): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996166.732:29176): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242507 suid=74 rport=53798 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996166.734:29177): pid=242502 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996166.734:29178): pid=242502 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=168 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996166.734:29178): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc7127afd0 a2=1 a3=0 items=0 ppid=38931 pid=242502 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=168 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996166.734:29178): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996166.737:29179): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996166.766:29180): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.767:29181): pid=242513 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996166.768:29182): pid=242513 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996166.811:29183): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996166.811:29184): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.813:29185): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242514 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.860:29186): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242513 suid=0 rport=53798 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.860:29187): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242513 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996166.863:29188): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996166.863:29189): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996166.864:29190): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996166.864:29191): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996166.864:29192): pid=242502 uid=0 auid=0 ses=168 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242502 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.434:29193): pid=242536 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242536 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996167.435:29194): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242536 suid=74 rport=35128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996167.436:29195): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242536 suid=74 rport=35128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996167.527:29196): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996167.527:29197): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996167.556:29198): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996167.557:29199): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242536 suid=74 rport=35128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996167.559:29200): pid=242535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996167.559:29201): pid=242535 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=169 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996167.559:29201): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc47481850 a2=1 a3=0 items=0 ppid=38931 pid=242535 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=169 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996167.559:29201): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996167.561:29202): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996167.587:29203): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.588:29204): pid=242546 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996167.590:29205): pid=242546 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996167.632:29206): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996167.633:29207): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.634:29208): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242554 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.678:29209): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242546 suid=0 rport=35128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.679:29210): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242546 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996167.681:29211): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996167.682:29212): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996167.682:29213): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996167.683:29214): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996167.683:29215): pid=242535 uid=0 auid=0 ses=169 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.287:29216): pid=242577 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242577 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996168.288:29217): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242577 suid=74 rport=35136 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996168.289:29218): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242577 suid=74 rport=35136 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996168.735:29219): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996168.735:29220): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996168.756:29221): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996168.756:29222): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242577 suid=74 rport=35136 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996168.759:29223): pid=242576 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996168.759:29224): pid=242576 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=170 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996168.759:29224): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde059eba0 a2=1 a3=0 items=0 ppid=38931 pid=242576 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=170 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996168.759:29224): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996168.760:29225): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996168.799:29226): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.800:29227): pid=242631 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996168.802:29228): pid=242631 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996168.843:29229): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996168.843:29230): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.845:29231): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.888:29232): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242631 suid=0 rport=35136 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.889:29233): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242631 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996168.891:29234): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996168.891:29235): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996168.892:29236): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996168.892:29237): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996168.892:29238): pid=242576 uid=0 auid=0 ses=170 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242576 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.419:29239): pid=242654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996169.420:29240): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242654 suid=74 rport=35140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996169.421:29241): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242654 suid=74 rport=35140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996169.496:29242): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996169.496:29243): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996169.521:29244): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996169.521:29245): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242654 suid=74 rport=35140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996169.523:29246): pid=242653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996169.523:29247): pid=242653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=171 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996169.523:29247): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd233ca30 a2=1 a3=0 items=0 ppid=38931 pid=242653 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=171 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996169.523:29247): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996169.525:29248): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996169.550:29249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996169.554:29250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996169.558:29251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996169.561:29252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996169.584:29253): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.585:29254): pid=242689 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996169.587:29255): pid=242689 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996169.630:29256): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996169.630:29257): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.634:29258): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.668:29259): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242689 suid=0 rport=35140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.668:29260): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242689 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996169.671:29261): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996169.671:29262): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996169.672:29263): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996169.672:29264): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996169.672:29265): pid=242653 uid=0 auid=0 ses=171 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996169.738:29266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996169.871:29267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996170.012:29268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996170.094:29269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996170.250:29270): pid=242786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996170.251:29271): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242786 suid=74 rport=35142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996170.252:29272): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242786 suid=74 rport=35142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996170.342:29273): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996170.342:29274): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996170.372:29275): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996170.373:29276): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242786 suid=74 rport=35142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996170.376:29277): pid=242785 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996170.376:29278): pid=242785 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=172 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996170.376:29278): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffceee5ef80 a2=1 a3=0 items=0 ppid=38931 pid=242785 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=172 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996170.376:29278): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996170.378:29279): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996170.409:29280): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996170.410:29281): pid=242789 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996170.412:29282): pid=242789 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996170.456:29283): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996170.456:29284): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996170.481:29285): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996170.533:29286): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242789 suid=0 rport=35142 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996170.535:29287): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996170.537:29288): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996170.538:29289): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996170.539:29290): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996170.539:29291): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996170.539:29292): pid=242785 uid=0 auid=0 ses=172 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.096:29293): pid=242828 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996171.097:29294): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242828 suid=74 rport=35150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996171.097:29295): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242828 suid=74 rport=35150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996171.177:29296): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996171.177:29297): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996171.207:29298): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996171.208:29299): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242828 suid=74 rport=35150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996171.211:29300): pid=242823 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996171.211:29301): pid=242823 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=173 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996171.211:29301): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff34fee7b0 a2=1 a3=0 items=0 ppid=38931 pid=242823 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=173 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996171.211:29301): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996171.213:29302): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996171.242:29303): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.244:29304): pid=242831 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996171.245:29305): pid=242831 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996171.289:29306): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996171.289:29307): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.293:29308): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242832 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.337:29309): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242831 suid=0 rport=35150 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.338:29310): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242831 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996171.340:29311): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996171.340:29312): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996171.341:29313): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996171.341:29314): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.341:29315): pid=242823 uid=0 auid=0 ses=173 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242823 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996171.910:29316): pid=242903 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242903 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996171.911:29317): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242903 suid=74 rport=35160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996171.911:29318): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242903 suid=74 rport=35160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996171.997:29319): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996171.997:29320): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996172.027:29321): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996172.028:29322): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242903 suid=74 rport=35160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996172.030:29323): pid=242902 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996172.030:29324): pid=242902 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=174 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996172.030:29324): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffa48ed870 a2=1 a3=0 items=0 ppid=38931 pid=242902 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=174 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996172.030:29324): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996172.032:29325): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996172.062:29326): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.064:29327): pid=242905 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996172.066:29328): pid=242905 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996172.110:29329): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996172.110:29330): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.111:29331): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242913 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.149:29332): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242905 suid=0 rport=35160 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.151:29333): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996172.153:29334): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996172.154:29335): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996172.154:29336): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996172.154:29337): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.155:29338): pid=242902 uid=0 auid=0 ses=174 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242902 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.744:29339): pid=242989 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242989 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996172.745:29340): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242989 suid=74 rport=35166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996172.745:29341): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=242989 suid=74 rport=35166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996172.835:29342): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996172.835:29343): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996172.856:29344): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996172.856:29345): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=242989 suid=74 rport=35166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996172.858:29346): pid=242983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996172.858:29347): pid=242983 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=175 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996172.858:29347): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce2d65250 a2=1 a3=0 items=0 ppid=38931 pid=242983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=175 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996172.858:29347): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996172.860:29348): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996172.897:29349): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.898:29350): pid=243034 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=243034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996172.899:29351): pid=243034 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996172.941:29352): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996172.942:29353): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.943:29354): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=243041 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996172.983:29355): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996172.983:29356): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.983:29357): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=243034 suid=0 rport=35166 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.984:29358): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=243034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996172.987:29359): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996172.987:29360): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996172.988:29361): pid=242983 uid=0 auid=0 ses=175 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=242983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996175.202:29362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.207:29363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.307:29364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.384:29365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.396:29366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.401:29367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.403:29368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.546:29369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996175.596:29370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.603:29371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.626:29372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.704:29373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.721:29374): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.849:29375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.916:29376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996175.937:29377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.631:29378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.636:29379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.640:29380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.644:29381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.648:29382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.652:29383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996177.656:29384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996177.878:29385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996177.945:29386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996177.955:29387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996178.041:29388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996178.116:29389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996178.240:29390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996178.286:29391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773996181.177:29392): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773996182.627:29393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996182.801:29394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996183.135:29395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773996183.150:29396): pid=236317 uid=0 auid=0 ses=93 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773996183.153:29397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996183.192:29398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996183.755:29399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996200.630:29400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996200.635:29401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996200.640:29402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996200.646:29403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996200.834:29404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996200.889:29405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996200.968:29406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996201.021:29407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.624:29408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.629:29409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.634:29410): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.795:29411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.800:29412): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.894:29413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996205.899:29414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996205.925:29415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.949:29416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996205.956:29417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.148:29418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.172:29419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.200:29420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.241:29421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.328:29422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996206.382:29423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.644:29424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.648:29425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.652:29426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.656:29427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.660:29428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.664:29429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996208.668:29430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996208.818:29431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996208.984:29432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996209.013:29433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996209.063:29434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996209.075:29435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996209.114:29436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996209.229:29437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996213.632:29438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996213.832:29439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996213.859:29440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996214.392:29441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996231.632:29442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996231.636:29443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996231.640:29444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996231.643:29445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996231.832:29446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996231.880:29447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996231.945:29448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996232.011:29449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.640:29450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.646:29451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.651:29452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.655:29453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.660:29454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.664:29455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.668:29456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996236.672:29457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996236.841:29458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996236.892:29459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.078:29460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.136:29461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.192:29462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.298:29463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.367:29464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996237.422:29465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.630:29466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.633:29467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.636:29468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.640:29469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.643:29470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.647:29471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996239.654:29472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996239.859:29473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996239.924:29474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996239.954:29475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996240.087:29476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996240.098:29477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996240.108:29478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996240.174:29479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996241.945:29480): pid=248269 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248269 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996241.947:29481): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248269 suid=74 rport=43294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996241.947:29482): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248269 suid=74 rport=43294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996242.039:29483): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996242.039:29484): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996242.070:29485): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996242.070:29486): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248269 suid=74 rport=43294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996242.072:29487): pid=248268 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996242.072:29488): pid=248268 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=176 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996242.072:29488): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2a6ab2b0 a2=1 a3=0 items=0 ppid=38931 pid=248268 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=176 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996242.072:29488): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996242.074:29489): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996242.126:29490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996242.169:29491): pid=248280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773996242.169:29492): pid=248280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773996242.170:29493): pid=248280 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996242.171:29494): pid=248280 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=177 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996242.171:29494): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=248280 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=177 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996242.171:29494): proctitle="(systemd)"
type=USER_START msg=audit(1773996242.174:29495): pid=248280 uid=0 auid=0 ses=177 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996242.201:29496): prog-id=1503 op=LOAD
type=SYSCALL msg=audit(1773996242.201:29496): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1ad01070 a2=90 a3=0 items=0 ppid=1 pid=248280 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=177 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996242.201:29496): proctitle="(systemd)"
type=BPF msg=audit(1773996242.202:29497): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773996242.202:29498): prog-id=1504 op=LOAD
type=SYSCALL msg=audit(1773996242.202:29498): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc1ad01110 a2=90 a3=4 items=0 ppid=1 pid=248280 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=177 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996242.202:29498): proctitle="(systemd)"
type=BPF msg=audit(1773996242.202:29499): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773996242.388:29500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996242.419:29501): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996242.421:29502): pid=248336 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996242.424:29503): pid=248336 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996242.468:29504): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996242.468:29505): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996242.470:29506): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996242.530:29507): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996242.530:29508): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996242.531:29509): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996242.535:29510): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996242.551:29511): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996242.552:29512): pid=248350 uid=0 auid=0 ses=176 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996242.557:29513): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248336 suid=0 rport=43294 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996242.558:29514): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996242.561:29515): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996242.562:29516): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996242.563:29517): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996242.563:29518): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996242.563:29519): pid=248268 uid=0 auid=0 ses=176 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248268 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.109:29520): pid=248497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996244.110:29521): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248497 suid=74 rport=43310 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996244.110:29522): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248497 suid=74 rport=43310 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996244.205:29523): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996244.205:29524): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996244.235:29525): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996244.235:29526): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248497 suid=74 rport=43310 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996244.238:29527): pid=248496 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996244.238:29528): pid=248496 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=178 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996244.238:29528): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd002a9e50 a2=1 a3=0 items=0 ppid=38931 pid=248496 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=178 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996244.238:29528): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996244.239:29529): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996244.261:29530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773996244.277:29531): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.278:29532): pid=248505 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996244.280:29533): pid=248505 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996244.323:29534): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996244.323:29535): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.326:29536): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248511 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996244.406:29537): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996244.406:29538): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363431206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996244.408:29539): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996244.415:29540): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773996244.437:29541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=NETFILTER_CFG msg=audit(1773996244.447:29542): table=filter:6 family=1 entries=1 op=nft_register_rule pid=248546 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1773996244.447:29542): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffe07134fd0 a2=0 a3=7eff3dc86bc4 items=0 ppid=248511 pid=248546 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=178 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996244.447:29542): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363431006374007374617465006E657700636F756E74657200616363657074
type=USER_END msg=audit(1773996244.450:29543): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996244.450:29544): pid=248511 uid=0 auid=0 ses=178 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.454:29545): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248505 suid=0 rport=43310 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.454:29546): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248505 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996244.458:29547): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996244.458:29548): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996244.459:29549): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996244.459:29550): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.459:29551): pid=248496 uid=0 auid=0 ses=178 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248496 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.479:29552): pid=248565 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248565 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996244.480:29553): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248565 suid=74 rport=43324 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996244.480:29554): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248565 suid=74 rport=43324 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773996244.486:29555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996244.570:29556): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996244.570:29557): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996244.599:29558): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996244.600:29559): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248565 suid=74 rport=43324 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996244.602:29560): pid=248560 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996244.602:29561): pid=248560 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=179 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996244.602:29561): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc0c52bfb0 a2=1 a3=0 items=0 ppid=38931 pid=248560 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=179 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996244.602:29561): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996244.603:29562): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996244.632:29563): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.633:29564): pid=248588 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996244.635:29565): pid=248588 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996244.678:29566): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996244.678:29567): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.680:29568): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248590 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996244.732:29569): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996244.732:29570): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=6E6674206164642072756C6520696E65742066696C74657220494E505554206970207361646472203137322E31372E312E302F3234207463702064706F72742036363432206374207374617465206E657720636F756E74657220616363657074 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996244.733:29571): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996244.737:29572): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=NETFILTER_CFG msg=audit(1773996244.743:29573): table=filter:7 family=1 entries=1 op=nft_register_rule pid=248606 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 comm="nft"
type=SYSCALL msg=audit(1773996244.743:29573): arch=c000003e syscall=46 success=yes exit=652 a0=3 a1=7ffcf8d0da00 a2=0 a3=7f3f4ab12bc4 items=0 ppid=248590 pid=248606 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=179 comm="nft" exe="/usr/sbin/nft" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=sendmsg AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996244.743:29573): proctitle=6E6674006164640072756C6500696E65740066696C74657200494E505554006970007361646472003137322E31372E312E302F3234007463700064706F72740036363432006374007374617465006E657700636F756E74657200616363657074
type=USER_END msg=audit(1773996244.744:29574): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996244.744:29575): pid=248590 uid=0 auid=0 ses=179 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.747:29576): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248588 suid=0 rport=43324 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.747:29577): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248588 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996244.749:29578): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996244.749:29579): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996244.750:29580): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996244.750:29581): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996244.750:29582): pid=248560 uid=0 auid=0 ses=179 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248560 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773996245.000:29583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996250.758:29584): pid=248879 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248879 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996250.761:29585): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248879 suid=74 rport=50018 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996250.761:29586): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=248879 suid=74 rport=50018 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996250.853:29587): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996250.853:29588): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996250.883:29589): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996250.883:29590): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248879 suid=74 rport=50018 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996250.886:29591): pid=248878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996250.886:29592): pid=248878 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=180 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996250.886:29592): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc7d92c70 a2=1 a3=0 items=0 ppid=38931 pid=248878 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=180 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996250.886:29592): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996250.887:29593): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996250.930:29594): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996250.932:29595): pid=248908 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996250.933:29596): pid=248908 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996250.977:29597): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996250.977:29598): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996250.981:29599): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248919 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996251.050:29600): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996251.051:29601): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996251.053:29602): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996251.058:29603): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996251.078:29604): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996251.078:29605): pid=248960 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_ACCT msg=audit(1773996251.107:29606): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996251.107:29607): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996251.107:29608): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996251.109:29609): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996251.266:29610): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996251.428:29611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_north_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996251.431:29612): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996251.431:29613): pid=248963 uid=0 auid=0 ses=180 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996251.435:29614): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996251.435:29615): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996251.435:29616): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=248908 suid=0 rport=50018 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996251.436:29617): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996251.440:29618): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996251.440:29619): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996251.440:29620): pid=248878 uid=0 auid=0 ses=180 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=248878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996252.851:29621): pid=249140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996252.852:29622): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=249140 suid=74 rport=50030 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996252.852:29623): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=249140 suid=74 rport=50030 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996252.943:29624): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996252.943:29625): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773996252.974:29626): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996252.974:29627): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249140 suid=74 rport=50030 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773996252.977:29628): pid=249139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773996252.977:29629): pid=249139 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=181 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773996252.977:29629): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5c885390 a2=1 a3=0 items=0 ppid=38931 pid=249139 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=181 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773996252.977:29629): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773996252.978:29630): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996253.009:29631): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996253.011:29632): pid=249158 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773996253.012:29633): pid=249158 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773996253.056:29634): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773996253.056:29635): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996253.059:29636): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249159 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773996253.113:29637): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996253.114:29638): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D61637469766520747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996253.115:29639): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996253.119:29640): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996253.130:29641): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996253.130:29642): pid=249172 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_ACCT msg=audit(1773996253.157:29643): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773996253.158:29644): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2073746F7020747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773996253.158:29645): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773996253.160:29646): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773996253.297:29647): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773996253.524:29648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_south_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773996253.527:29649): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996253.527:29650): pid=249175 uid=0 auid=0 ses=181 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773996253.530:29651): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773996253.530:29652): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773996253.530:29653): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249158 suid=0 rport=50030 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996253.530:29654): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249158 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773996253.534:29655): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773996253.534:29656): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773996253.534:29657): pid=249139 uid=0 auid=0 ses=181 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773996262.633:29658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996262.638:29659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996262.643:29660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996262.646:29661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996262.848:29662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996262.857:29663): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996262.903:29664): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996262.950:29665): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773996263.627:29666): pid=248282 uid=0 auid=0 ses=177 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773996263.629:29667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996263.663:29668): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996266.258:29669): pid=249968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996266.366:29670): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=249968 suid=74 rport=55684 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996266.366:29671): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=249968 suid=74 rport=55684 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996266.968:29672): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996266.971:29673): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996266.974:29674): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sol" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.115:29675): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.119:29676): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.180:29677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.290:29678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.340:29679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.353:29680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.396:29681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996267.440:29682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.542:29683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.643:29684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.674:29685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.694:29686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.776:29687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996267.834:29688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996269.404:29689): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=249968 suid=74 rport=55684 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996269.405:29690): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249968 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996269.406:29691): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=249967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996269.406:29692): pid=249967 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.632:29693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.636:29694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.640:29695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.644:29696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.650:29697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.656:29698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996270.660:29699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996270.874:29700): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996270.966:29701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996271.091:29702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996271.113:29703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996271.123:29704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996271.206:29705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996271.293:29706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996274.619:29707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996274.799:29708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996275.621:29709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996276.191:29710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996293.625:29711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996293.628:29712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996293.630:29713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996293.633:29714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996293.812:29715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996293.850:29716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996293.914:29717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996293.982:29718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.624:29719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.628:29720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.632:29721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.749:29722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.752:29723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.755:29724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.806:29725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996297.854:29726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996297.913:29727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996297.986:29728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.006:29729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.082:29730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.101:29731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.122:29732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.142:29733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996298.270:29734): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.683:29735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.686:29736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.691:29737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.696:29738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.701:29739): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.708:29740): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996301.713:29741): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996301.976:29742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996301.980:29743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996302.036:29744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996302.046:29745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996302.156:29746): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996302.311:29747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996302.334:29748): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996305.626:29749): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996305.830:29750): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996306.628:29751): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996307.241:29752): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996324.638:29753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996324.642:29754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996324.646:29755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996324.650:29756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996324.852:29757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996324.928:29758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996324.980:29759): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996325.081:29760): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.628:29761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.631:29762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.634:29763): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.637:29764): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.640:29765): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.643:29766): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.645:29767): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996328.648:29768): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996328.930:29769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996328.959:29770): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996328.992:29771): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996329.016:29772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996329.025:29773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996329.107:29774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996329.112:29775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996329.143:29776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.628:29777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.632:29778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.635:29779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.639:29780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.643:29781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.646:29782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996332.650:29783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996332.799:29784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996332.991:29785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996333.020:29786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996333.100:29787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996333.142:29788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996333.236:29789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996333.313:29790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996336.632:29791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996336.800:29792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996337.632:29793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996338.239:29794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996355.629:29795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996355.633:29796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996355.637:29797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996355.641:29798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996356.067:29799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996356.107:29800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996356.375:29801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996356.453:29802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.635:29803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.639:29804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.644:29805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.648:29806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.652:29807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.657:29808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.662:29809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996359.668:29810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996359.905:29811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996359.944:29812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.007:29813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.114:29814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.151:29815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.161:29816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.207:29817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996360.223:29818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.631:29819): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.636:29820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.640:29821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.644:29822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.649:29823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.654:29824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996363.661:29825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996363.841:29826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996363.877:29827): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996363.936:29828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996363.966:29829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996364.082:29830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996364.346:29831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996364.439:29832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996367.631:29833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996367.822:29834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996368.626:29835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996369.170:29836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996386.628:29837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996386.632:29838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996386.635:29839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996386.639:29840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996386.939:29841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996386.983:29842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996386.994:29843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996387.066:29844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.631:29845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.635:29846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.638:29847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.642:29848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.647:29849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.658:29850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.664:29851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996390.669:29852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996390.848:29853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.014:29854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.084:29855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.104:29856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.137:29857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.152:29858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.156:29859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996391.210:29860): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.625:29861): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.630:29862): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.635:29863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.640:29864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.644:29865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.650:29866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996394.654:29867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.012:29868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.107:29869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.179:29870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.276:29871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.382:29872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.430:29873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996395.587:29874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996398.626:29875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996398.846:29876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996399.620:29877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996400.180:29878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996409.319:29879): pid=260285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=260285 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996409.425:29880): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=260285 suid=74 rport=41202 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996409.425:29881): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=260285 suid=74 rport=41202 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996409.891:29882): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="sol" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996412.343:29883): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=260285 suid=74 rport=41202 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996412.343:29884): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=260285 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996412.344:29885): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=260284 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996412.344:29886): pid=260284 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996417.627:29887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996417.631:29888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996417.635:29889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996417.639:29890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996417.895:29891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996417.918:29892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996417.943:29893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996418.117:29894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.626:29895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.630:29896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.634:29897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.638:29898): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.643:29899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.648:29900): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.653:29901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996421.660:29902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996421.884:29903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996421.938:29904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.013:29905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.037:29906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.110:29907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.128:29908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.159:29909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996422.170:29910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.631:29911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.635:29912): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.639:29913): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.643:29914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.647:29915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.652:29916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996425.656:29917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996425.945:29918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.043:29919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.097:29920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.138:29921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.217:29922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.291:29923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996426.341:29924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996429.620:29925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996429.853:29926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996430.235:29927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996430.862:29928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996448.629:29929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996448.634:29930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996448.639:29931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996448.645:29932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996449.041:29933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996449.086:29934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996449.193:29935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996449.397:29936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.631:29937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.635:29938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.638:29939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.642:29940): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.646:29941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.650:29942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.654:29943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996452.658:29944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996452.920:29945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.027:29946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.047:29947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.071:29948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.082:29949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.146:29950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.154:29951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996453.243:29952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.648:29953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.651:29954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.654:29955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.656:29956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.658:29957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.661:29958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996456.685:29959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996456.861:29960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996456.881:29961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996457.074:29962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996457.102:29963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996457.118:29964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996457.189:29965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996457.265:29966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996460.620:29967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996460.754:29968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996461.623:29969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996462.164:29970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996479.625:29971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996479.630:29972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996479.634:29973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996479.638:29974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996479.831:29975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996479.844:29976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996479.901:29977): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996479.981:29978): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.626:29979): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.630:29980): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.634:29981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.637:29982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.642:29983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.646:29984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.649:29985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996483.653:29986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996483.853:29987): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996483.887:29988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.009:29989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.063:29990): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.078:29991): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.095:29992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.182:29993): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996484.198:29994): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.628:29995): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.633:29996): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.639:29997): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.644:29998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.649:29999): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.654:30000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996487.659:30001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996487.772:30002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996487.950:30003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996488.045:30004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996488.054:30005): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996488.069:30006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996488.114:30007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996488.164:30008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996491.124:30009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996491.327:30010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996492.627:30011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996493.156:30012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996510.629:30013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996510.634:30014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996510.638:30015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996510.642:30016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996510.893:30017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996510.929:30018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996510.988:30019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996511.039:30020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.633:30021): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.636:30022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.638:30023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.640:30024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.642:30025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.645:30026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.649:30027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996514.653:30028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996514.962:30029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996514.976:30030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.013:30031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.034:30032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.064:30033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.129:30034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.195:30035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996515.235:30036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.629:30037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.633:30038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.635:30039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.637:30040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.639:30041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.642:30042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996518.644:30043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996518.898:30044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996518.945:30045): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996518.981:30046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996519.022:30047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996519.055:30048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996519.144:30049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996519.239:30050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996521.626:30051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996521.767:30052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996523.621:30053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996524.102:30054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996541.631:30055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996541.636:30056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996541.639:30057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996541.643:30058): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996541.810:30059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996541.865:30060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996541.930:30061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996541.944:30062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996544.644:30063): pid=269741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=269741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996544.801:30064): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=269741 suid=74 rport=54972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996544.802:30065): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=269741 suid=74 rport=54972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996545.095:30066): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.099:30067): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.102:30068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.106:30069): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.110:30070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.211:30071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.220:30072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996545.221:30073): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="validator" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996545.270:30074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.516:30075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.530:30076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.541:30077): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.562:30078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.592:30079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.620:30080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.648:30081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996545.672:30082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996547.903:30083): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=269741 suid=74 rport=54972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996547.904:30084): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=269741 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996547.905:30085): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=269740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996547.905:30086): pid=269740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.627:30087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.630:30088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.632:30089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.634:30090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.637:30091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.639:30092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996549.642:30093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996549.858:30094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996549.921:30095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996549.962:30096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996549.986:30097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996550.003:30098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996550.033:30099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996550.156:30100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996552.625:30101): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996552.811:30102): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996554.626:30103): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996555.196:30104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996572.625:30105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996572.627:30106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996572.631:30107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996572.634:30108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996572.901:30109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996572.921:30110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996572.947:30111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996573.002:30112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.630:30113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.634:30114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.638:30115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.642:30116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.646:30117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.667:30118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.671:30119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996575.777:30120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996575.923:30121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996575.979:30122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.057:30123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.134:30124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.148:30125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.191:30126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.208:30127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996576.267:30128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.629:30129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.634:30130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.638:30131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.642:30132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.647:30133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.652:30134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996580.658:30135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996580.823:30136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996580.914:30137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996580.939:30138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996580.968:30139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996581.021:30140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996581.069:30141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996581.396:30142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996583.622:30143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996583.810:30144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996585.626:30145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996586.178:30146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996603.625:30147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996603.628:30148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996603.630:30149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996603.632:30150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996603.809:30151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996603.833:30152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996603.856:30153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996603.912:30154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.630:30155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.634:30156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.639:30157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.643:30158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.648:30159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.652:30160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.657:30161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996606.661:30162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996606.938:30163): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996606.953:30164): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.002:30165): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.063:30166): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.134:30167): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.139:30168): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.183:30169): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996607.373:30170): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996610.882:30171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.005:30172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.009:30173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.013:30174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.050:30175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.065:30176): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.191:30177): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.195:30178): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.311:30179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.330:30180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.384:30181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996611.502:30182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.506:30183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996611.872:30184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996614.624:30185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996614.823:30186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996616.622:30187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996617.200:30188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996634.633:30189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996634.638:30190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996634.642:30191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996634.650:30192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996634.790:30193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996634.882:30194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996634.911:30195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996635.042:30196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.630:30197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.634:30198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.637:30199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.641:30200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.645:30201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.651:30202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.656:30203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996637.662:30204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996637.968:30205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.009:30206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.045:30207): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.089:30208): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.111:30209): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.144:30210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.161:30211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996638.220:30212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.630:30213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.635:30214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.639:30215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.642:30216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.646:30217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.649:30218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996641.805:30219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996641.875:30220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996641.888:30221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996641.917:30222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996641.944:30223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996642.220:30224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996642.254:30225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996642.284:30226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996645.620:30227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996645.814:30228): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996647.634:30229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996648.217:30230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996665.629:30231): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996665.633:30232): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996665.637:30233): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996665.643:30234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996665.983:30235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996666.001:30236): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996666.049:30237): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996666.086:30238): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.629:30239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.633:30240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.637:30241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.641:30242): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.644:30243): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.648:30244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.654:30245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996668.660:30246): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996668.985:30247): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.049:30248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.112:30249): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.131:30250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.136:30251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.189:30252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.196:30253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996669.236:30254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996672.543:30255): pid=279157 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=279157 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1773996672.630:30256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996672.635:30257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996672.639:30258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996672.643:30259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996672.647:30260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996672.650:30261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773996672.656:30262): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=279157 suid=74 rport=40486 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996672.657:30263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773996672.661:30264): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=279157 suid=74 rport=40486 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773996672.973:30265): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.007:30266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.026:30267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.044:30268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996673.107:30269): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="blockchain" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.119:30270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.127:30271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996673.153:30272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996676.458:30273): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=279157 suid=74 rport=40486 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996676.459:30274): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=279157 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996676.460:30275): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=279156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996676.461:30276): pid=279156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996676.476:30277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996676.664:30278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996678.624:30279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996679.194:30280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996696.625:30281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996696.628:30282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996696.631:30283): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996696.634:30284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996696.809:30285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996696.838:30286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996696.893:30287): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996697.007:30288): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.631:30289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.635:30290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.638:30291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.642:30292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.646:30293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.650:30294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.669:30295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996699.674:30296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996699.740:30297): pid=281079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=281079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1773996699.967:30298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.056:30299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.066:30300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.098:30301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.160:30302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.209:30303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.220:30304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996700.299:30305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773996700.615:30306): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=281079 suid=74 rport=28634 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996700.615:30307): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=281079 suid=74 rport=28634 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996701.718:30308): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.627:30309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.633:30310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.637:30311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.641:30312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.645:30313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.649:30314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996703.654:30315): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996703.881:30316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996703.890:30317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996703.980:30318): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996704.047:30319): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996704.235:30320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996704.293:30321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996704.372:30322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996705.961:30323): pid=281550 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996707.627:30324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996707.770:30325): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996707.814:30326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996708.437:30327): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281079 suid=74 rport=28634 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996708.437:30328): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=281079 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996708.440:30329): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=280993 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996708.440:30330): pid=280993 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996708.953:30331): pid=281729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=281729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996708.954:30332): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=281729 suid=74 rport=51228 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996708.954:30333): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=281729 suid=74 rport=51228 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996709.625:30334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996710.184:30335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996710.235:30336): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996715.417:30337): pid=282140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996717.463:30338): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996717.785:30339): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=281729 suid=74 rport=51228 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996717.785:30340): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=281729 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996717.787:30341): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=281705 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996717.787:30342): pid=281705 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996718.117:30343): pid=282325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996718.334:30344): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=282325 suid=74 rport=22628 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996718.334:30345): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=282325 suid=74 rport=22628 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996719.564:30346): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996724.214:30347): pid=282511 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996726.164:30348): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996726.582:30349): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=282325 suid=74 rport=22628 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996726.582:30350): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282325 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996726.584:30351): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282308 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996726.584:30352): pid=282308 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996726.954:30353): pid=282726 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282726 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996726.955:30354): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=282726 suid=74 rport=36428 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996726.955:30355): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=282726 suid=74 rport=36428 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996727.624:30356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996727.626:30357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996727.629:30358): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996727.631:30359): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996728.054:30360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996728.189:30361): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996728.295:30362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996728.336:30363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996728.511:30364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.624:30365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.626:30366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.628:30367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.631:30368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.633:30369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.635:30370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.642:30371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996730.645:30372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996730.807:30373): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996730.833:30374): pid=283137 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996730.898:30375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996730.936:30376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996731.019:30377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996731.115:30378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996731.167:30379): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996731.189:30380): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996731.292:30381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996733.412:30382): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996733.688:30383): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=282726 suid=74 rport=36428 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996733.689:30384): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282726 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996733.690:30385): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=282677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996733.690:30386): pid=282677 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996733.921:30387): pid=283558 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=283558 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996734.110:30388): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=283558 suid=74 rport=36442 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996734.110:30389): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=283558 suid=74 rport=36442 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996734.639:30390): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.642:30391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.644:30392): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.647:30393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.649:30394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.652:30395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996734.655:30396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996734.844:30397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996734.899:30398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996734.901:30399): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996734.994:30400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996735.074:30401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996735.084:30402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996735.117:30403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996735.226:30404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996738.625:30405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996738.808:30406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996739.458:30407): pid=283957 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=91.202.233.33 addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996740.620:30408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996740.937:30409): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996741.121:30410): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=283558 suid=74 rport=36442 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996741.121:30411): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=283558 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996741.123:30412): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=283557 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996741.123:30413): pid=283557 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=91.202.233.33 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996741.141:30414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996758.628:30415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996758.633:30416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996758.638:30417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996758.642:30418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996758.781:30419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996758.977:30420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996758.996:30421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996759.041:30422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996759.422:30423): pid=285234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=285234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1773996761.628:30424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.631:30425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.636:30426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.640:30427): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.645:30428): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.650:30429): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.656:30430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996761.663:30431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996761.943:30432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.032:30433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.085:30434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.090:30435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.105:30436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.122:30437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.131:30438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996762.157:30439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.624:30440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.627:30441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.630:30442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.632:30443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.636:30444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.640:30445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996765.644:30446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996765.746:30447): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996765.841:30448): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996766.012:30449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996766.039:30450): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996766.106:30451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996766.128:30452): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996766.181:30453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996769.626:30454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996769.816:30455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996771.621:30456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996772.188:30457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996789.631:30458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996789.635:30459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996789.638:30460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996789.642:30461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996789.786:30462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996789.910:30463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996789.916:30464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996789.968:30465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.630:30466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.634:30467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.638:30468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.641:30469): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.644:30470): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.649:30471): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.653:30472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996792.657:30473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.023:30474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.033:30475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.050:30476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.093:30477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.100:30478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.126:30479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.146:30480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996793.178:30481): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.629:30482): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.634:30483): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.638:30484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.642:30485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.647:30486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.652:30487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996796.657:30488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996796.930:30489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996796.945:30490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996796.973:30491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996797.070:30492): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996797.207:30493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996797.242:30494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996797.331:30495): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996800.630:30496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996800.848:30497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996802.626:30498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996803.137:30499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996804.473:30500): pid=288621 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288621 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996804.575:30501): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=288621 suid=74 rport=54238 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996804.575:30502): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=288621 suid=74 rport=54238 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996805.010:30503): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pool" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996805.030:30504): pid=288643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996805.044:30505): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=288643 suid=74 rport=45594 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996805.044:30506): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-ctr ksize=128 mac=hmac-sha2-256 pfs=curve25519-sha256@libssh.org spid=288643 suid=74 rport=45594 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996807.292:30507): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288621 suid=74 rport=54238 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996807.292:30508): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288621 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996807.293:30509): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288620 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996807.293:30510): pid=288620 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996813.010:30511): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=288643 suid=74 rport=45594 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996813.011:30512): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288643 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ERR msg=audit(1773996813.012:30513): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:bad_ident grantors=? acct="?" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996813.012:30514): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=288642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996813.012:30515): pid=288642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996820.631:30516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996820.636:30517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996820.642:30518): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996820.646:30519): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996820.793:30520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996820.829:30521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996820.997:30522): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996821.092:30523): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.630:30524): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.633:30525): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.636:30526): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.641:30527): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.645:30528): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.651:30529): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.657:30530): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996823.662:30531): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996823.948:30532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996823.998:30533): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.030:30534): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.067:30535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.095:30536): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.111:30537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.190:30538): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996824.217:30539): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.632:30540): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.635:30541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.638:30542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.640:30543): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.644:30544): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.649:30545): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996827.652:30546): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996827.768:30547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996827.872:30548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996827.959:30549): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996827.971:30550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996828.016:30551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996828.068:30552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996828.216:30553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996831.628:30554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996831.783:30555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996833.627:30556): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996834.251:30557): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996851.428:30558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996851.432:30559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996851.435:30560): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996851.438:30561): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996851.611:30562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996851.793:30563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996851.830:30564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996851.856:30565): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996854.555:30566): pid=26774 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=26793 suid=1002 rport=35180 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.100 terminal=? res=success'UID="root" AUID="tripleo-admin" SUID="tripleo-admin"
type=USER_END msg=audit(1773996854.562:30567): pid=26774 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=CRED_DISP msg=audit(1773996854.563:30568): pid=26774 uid=0 auid=1002 ses=15 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="tripleo-admin" exe="/usr/sbin/sshd" hostname=192.168.122.100 addr=192.168.122.100 terminal=ssh res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1773996854.593:30569): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.597:30570): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.601:30571): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.605:30572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.608:30573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.612:30574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.620:30575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996854.625:30576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996854.942:30577): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996854.948:30578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.010:30579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.017:30580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.120:30581): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.193:30582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.304:30583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996855.351:30584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.628:30585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.632:30586): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.637:30587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.641:30588): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.648:30589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.653:30590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996858.657:30591): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996858.911:30592): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996858.931:30593): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996858.959:30594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996859.008:30595): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996859.039:30596): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996859.078:30597): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996859.094:30598): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996862.632:30599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996862.852:30600): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996864.625:30601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996864.884:30602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996864.917:30603): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@1002 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996865.294:30604): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996882.475:30605): pid=293908 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=293908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996882.488:30606): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=293908 suid=74 rport=39734 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996882.488:30607): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=293908 suid=74 rport=39734 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996882.575:30608): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996882.579:30609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996882.583:30610): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996882.587:30611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996882.595:30612): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="claude" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996882.707:30613): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996882.817:30614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996882.828:30615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996882.960:30616): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.632:30617): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.635:30618): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.639:30619): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.642:30620): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.646:30621): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.649:30622): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.652:30623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996885.656:30624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996885.879:30625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996885.897:30626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996885.919:30627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996886.049:30628): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=293908 suid=74 rport=39734 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996886.050:30629): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=293908 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996886.051:30630): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=293907 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996886.051:30631): pid=293907 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996886.053:30632): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996886.068:30633): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996886.130:30634): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996886.139:30635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996886.197:30636): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996889.556:30637): pid=294509 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=294509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996889.571:30638): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=294509 suid=74 rport=36186 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996889.571:30639): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=294509 suid=74 rport=36186 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996889.628:30640): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.631:30641): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.633:30642): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.636:30643): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.638:30644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.641:30645): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996889.644:30646): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996889.668:30647): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="teamspeak" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996889.879:30648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996889.899:30649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996889.974:30650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996889.995:30651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996890.024:30652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996890.077:30653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996890.127:30654): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996892.067:30655): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=294509 suid=74 rport=36186 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996892.068:30656): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=294509 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996892.070:30657): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=294508 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996892.070:30658): pid=294508 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996893.626:30659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996893.829:30660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996895.621:30661): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996896.259:30662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996896.536:30663): pid=295117 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295117 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996896.550:30664): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295117 suid=74 rport=50272 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996896.550:30665): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295117 suid=74 rport=50272 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996896.641:30666): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="developer" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996898.856:30667): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295117 suid=74 rport=50272 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996898.857:30668): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295117 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996898.858:30669): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295116 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996898.858:30670): pid=295116 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996903.255:30671): pid=295417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996903.269:30672): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295417 suid=74 rport=50280 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996903.269:30673): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295417 suid=74 rport=50280 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996903.359:30674): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996905.519:30675): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295417 suid=74 rport=50280 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996905.519:30676): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295417 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996905.521:30677): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996905.521:30678): pid=295416 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996909.997:30679): pid=295840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295840 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996910.011:30680): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295840 suid=74 rport=41114 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996910.011:30681): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=295840 suid=74 rport=41114 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996910.098:30682): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bitrix" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996912.824:30683): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=295840 suid=74 rport=41114 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996912.825:30684): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295840 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996912.826:30685): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=295839 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996912.826:30686): pid=295839 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996912.849:30687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996912.853:30688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996912.856:30689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996912.999:30690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996913.054:30691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996913.151:30692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996913.184:30693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996913.242:30694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.627:30695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.631:30696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.635:30697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.640:30698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.645:30699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996916.649:30700): pid=296350 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=296350 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_START msg=audit(1773996916.650:30701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.655:30702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996916.661:30703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773996916.668:30704): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=296350 suid=74 rport=57852 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996916.669:30705): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=296350 suid=74 rport=57852 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996916.757:30706): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="weblogic" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996916.849:30707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996916.987:30708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996916.997:30709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996917.030:30710): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996917.043:30711): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996917.072:30712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996917.113:30713): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996917.198:30714): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996918.970:30715): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=296350 suid=74 rport=57852 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996918.971:30716): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=296350 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996918.972:30717): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=296329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996918.973:30718): pid=296329 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.628:30719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.633:30720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.637:30721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.641:30722): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.648:30723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.652:30724): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996920.655:30725): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996920.881:30726): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996920.900:30727): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996920.908:30728): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996920.913:30729): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996920.980:30730): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996921.168:30731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996921.216:30732): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996923.139:30733): pid=297163 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996923.150:30734): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297163 suid=74 rport=57862 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996923.150:30735): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297163 suid=74 rport=57862 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996923.232:30736): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tomcat" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996924.628:30737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996924.823:30738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996925.292:30739): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297163 suid=74 rport=57862 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996925.293:30740): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297163 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996925.294:30741): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297162 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996925.294:30742): pid=297162 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996926.626:30743): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996927.217:30744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996928.829:30745): pid=297456 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996928.935:30746): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297456 suid=74 rport=39768 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996928.935:30747): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297456 suid=74 rport=39768 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996929.399:30748): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="miner" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996929.837:30749): pid=297482 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297482 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996929.851:30750): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297482 suid=74 rport=53724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996929.852:30751): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297482 suid=74 rport=53724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996929.962:30752): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="frappe" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996932.063:30753): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297482 suid=74 rport=53724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996932.063:30754): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297482 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996932.065:30755): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996932.065:30756): pid=297481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996932.912:30757): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297456 suid=74 rport=39768 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996932.912:30758): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297456 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996932.913:30759): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996932.913:30760): pid=297455 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996936.588:30761): pid=297869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297869 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996936.606:30762): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297869 suid=74 rport=44142 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996936.606:30763): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=297869 suid=74 rport=44142 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996936.679:30764): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="zabbix" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996939.035:30765): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=297869 suid=74 rport=44142 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996939.035:30766): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297869 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996939.037:30767): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=297868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996939.037:30768): pid=297868 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996943.216:30769): pid=298230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996943.230:30770): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=298230 suid=74 rport=44146 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996943.230:30771): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=298230 suid=74 rport=44146 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773996943.307:30772): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996943.309:30773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996943.310:30774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996943.313:30775): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773996943.324:30776): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="webmaster" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996943.426:30777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996943.507:30778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996943.585:30779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996943.591:30780): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996945.299:30781): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298230 suid=74 rport=44146 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996945.300:30782): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298230 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996945.301:30783): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996945.301:30784): pid=298229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.627:30785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.630:30786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.632:30787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.634:30788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.637:30789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.641:30790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.644:30791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996947.647:30792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996947.972:30793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996947.978:30794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996947.996:30795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996948.009:30796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996948.180:30797): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996948.218:30798): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996948.255:30799): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996948.262:30800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996949.958:30801): pid=298889 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298889 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996949.971:30802): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=298889 suid=74 rport=59250 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996949.972:30803): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=298889 suid=74 rport=59250 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996950.058:30804): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ossuser" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.628:30805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.632:30806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.635:30807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.639:30808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.643:30809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.646:30810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996951.649:30811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996951.884:30812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996951.985:30813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996952.035:30814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996952.036:30815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996952.125:30816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996952.137:30817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996952.145:30818): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996954.191:30819): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=298889 suid=74 rport=59250 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996954.192:30820): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298889 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996954.194:30821): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=298888 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996954.194:30822): pid=298888 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996955.629:30823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996955.854:30824): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996956.689:30825): pid=299409 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299409 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996956.713:30826): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=299409 suid=74 rport=48922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996956.713:30827): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=299409 suid=74 rport=48922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996956.793:30828): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kipt" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996957.635:30829): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996958.244:30830): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996960.205:30831): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299409 suid=74 rport=48922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996960.205:30832): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299409 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996960.206:30833): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996960.206:30834): pid=299408 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996963.484:30835): pid=299852 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299852 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996963.498:30836): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=299852 suid=74 rport=48932 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996963.498:30837): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=299852 suid=74 rport=48932 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996963.578:30838): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="frappe" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996965.721:30839): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=299852 suid=74 rport=48932 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996965.721:30840): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299852 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996965.723:30841): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=299850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996965.723:30842): pid=299850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996970.082:30843): pid=300212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996970.096:30844): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=300212 suid=74 rport=60066 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996970.096:30845): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=300212 suid=74 rport=60066 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996970.181:30846): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996972.341:30847): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=300212 suid=74 rport=60066 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996972.342:30848): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300212 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996972.343:30849): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996972.343:30850): pid=300211 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996973.626:30851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996973.630:30852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996973.634:30853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996973.640:30854): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996973.835:30855): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996973.939:30856): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996974.071:30857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996974.123:30858): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996976.735:30859): pid=300643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996976.749:30860): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=300643 suid=74 rport=59998 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996976.749:30861): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=300643 suid=74 rport=59998 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996976.860:30862): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.628:30863): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.631:30864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.634:30865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.637:30866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.640:30867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.643:30868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.646:30869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996978.649:30870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996978.947:30871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996978.958:30872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.025:30873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.082:30874): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.094:30875): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.108:30876): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.130:30877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996979.504:30878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996980.482:30879): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=300643 suid=74 rport=59998 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996980.483:30880): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300643 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996980.485:30881): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=300642 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996980.485:30882): pid=300642 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.636:30883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.641:30884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.646:30885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.652:30886): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.658:30887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.663:30888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996982.666:30889): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996982.949:30890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996982.954:30891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996982.986:30892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996982.991:30893): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996983.042:30894): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996983.052:30895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996983.105:30896): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996983.628:30897): pid=301495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996983.640:30898): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=301495 suid=74 rport=60012 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996983.641:30899): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=301495 suid=74 rport=60012 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996983.724:30900): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ts3" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996986.627:30901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996986.811:30902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996986.843:30903): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=301495 suid=74 rport=60012 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996986.844:30904): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301495 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996986.845:30905): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301494 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996986.845:30906): pid=301494 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773996988.631:30907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773996989.156:30908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996990.259:30909): pid=301805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996990.273:30910): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=301805 suid=74 rport=33710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996990.273:30911): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=301805 suid=74 rport=33710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996990.356:30912): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="rock" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996992.086:30913): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=301805 suid=74 rport=33710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996992.087:30914): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301805 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773996992.088:30915): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=301803 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773996992.088:30916): pid=301803 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773996997.009:30917): pid=302208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773996997.021:30918): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=302208 suid=74 rport=51958 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773996997.021:30919): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=302208 suid=74 rport=51958 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773996997.111:30920): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bot" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997000.324:30921): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302208 suid=74 rport=51958 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997000.324:30922): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302208 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997000.325:30923): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997000.325:30924): pid=302201 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997003.717:30925): pid=302617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997003.731:30926): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=302617 suid=74 rport=51974 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997003.731:30927): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=302617 suid=74 rport=51974 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997003.826:30928): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="bigdata" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997004.624:30929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997004.629:30930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997004.633:30931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997004.638:30932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997004.768:30933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997004.843:30934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997004.865:30935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997004.903:30936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997007.835:30937): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=302617 suid=74 rport=51974 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997007.835:30938): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302617 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997007.837:30939): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=302613 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997007.837:30940): pid=302613 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.627:30941): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.630:30942): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.634:30943): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.637:30944): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.640:30945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.644:30946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.647:30947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997009.651:30948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997009.857:30949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997009.922:30950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997009.932:30951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997009.980:30952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997010.070:30953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997010.116:30954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997010.128:30955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997010.178:30956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997011.564:30957): pid=303393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997011.576:30958): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=303393 suid=74 rport=53788 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997011.576:30959): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=303393 suid=74 rport=53788 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997011.654:30960): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="node" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.626:30961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.632:30962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.637:30963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.641:30964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.646:30965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.650:30966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997013.654:30967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997013.927:30968): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997013.981:30969): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997014.033:30970): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997014.089:30971): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997014.146:30972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997014.238:30973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997014.379:30974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997014.518:30975): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303393 suid=74 rport=53788 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997014.520:30976): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303393 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997014.521:30977): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997014.521:30978): pid=303392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997017.189:30979): pid=303741 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997017.203:30980): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=303741 suid=74 rport=50100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997017.203:30981): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=303741 suid=74 rport=50100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997017.286:30982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997017.294:30983): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997017.474:30984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997019.625:30985): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997020.233:30986): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997020.549:30987): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=303741 suid=74 rport=50100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997020.549:30988): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303741 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997020.551:30989): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=303740 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997020.551:30990): pid=303740 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997023.891:30991): pid=304156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997023.903:30992): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304156 suid=74 rport=50118 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997023.903:30993): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304156 suid=74 rport=50118 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997023.989:30994): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tom" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997026.662:30995): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304156 suid=74 rport=50118 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997026.662:30996): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304156 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997026.663:30997): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997026.663:30998): pid=304155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997030.523:30999): pid=304523 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997030.542:31000): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304523 suid=74 rport=57548 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997030.542:31001): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304523 suid=74 rport=57548 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997030.649:31002): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nobody" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997033.527:31003): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304523 suid=74 rport=57548 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997033.527:31004): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304523 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997033.529:31005): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304522 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997033.529:31006): pid=304522 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="nobody" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997035.625:31007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997035.630:31008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997035.635:31009): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997035.641:31010): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997035.824:31011): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997035.907:31012): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997035.953:31013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997036.006:31014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997037.414:31015): pid=304973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997037.416:31016): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304973 suid=74 rport=36564 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997037.416:31017): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=304973 suid=74 rport=36564 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997037.532:31018): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="www" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997039.791:31019): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=304973 suid=74 rport=36564 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997039.792:31020): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304973 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997039.793:31021): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=304962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997039.793:31022): pid=304962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.633:31023): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.638:31024): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.642:31025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.648:31026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.654:31027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.662:31028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.665:31029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997040.669:31030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997040.888:31031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997040.986:31032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.059:31033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.091:31034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.107:31035): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.156:31036): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.213:31037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997041.264:31038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997043.950:31039): pid=305657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=305657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997043.964:31040): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=305657 suid=74 rport=36578 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997043.964:31041): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=305657 suid=74 rport=36578 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997044.042:31042): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.045:31043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.051:31044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997044.074:31045): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="vagrant" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.151:31046): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.157:31047): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.175:31048): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.259:31049): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997044.415:31050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.519:31051): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.543:31052): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.552:31053): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.584:31054): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.598:31055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997044.761:31056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997047.120:31057): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=305657 suid=74 rport=36578 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997047.121:31058): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=305657 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997047.122:31059): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=305656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997047.122:31060): pid=305656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997047.628:31061): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997047.828:31062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997050.645:31063): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997050.646:31064): pid=306156 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997050.647:31065): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306156 suid=74 rport=33928 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997050.648:31066): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306156 suid=74 rport=33928 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997050.735:31067): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="lenovo" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997051.243:31068): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997052.642:31069): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306156 suid=74 rport=33928 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997052.642:31070): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306156 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997052.644:31071): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997052.644:31072): pid=306154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997057.194:31073): pid=306569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306569 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997057.303:31074): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306569 suid=74 rport=53532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997057.303:31075): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306569 suid=74 rport=53532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997057.403:31076): pid=306616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997057.423:31077): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306616 suid=74 rport=34642 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997057.423:31078): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306616 suid=74 rport=34642 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997057.496:31079): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997057.760:31080): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=92.118.39.72 addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997060.011:31081): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306569 suid=74 rport=53532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997060.011:31082): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306569 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997060.013:31083): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306568 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997060.013:31084): pid=306568 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=92.118.39.72 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997060.751:31085): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306616 suid=74 rport=34642 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997060.751:31086): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306616 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997060.753:31087): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997060.753:31088): pid=306600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997064.140:31089): pid=306929 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306929 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997064.154:31090): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306929 suid=74 rport=34644 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997064.154:31091): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=306929 suid=74 rport=34644 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997064.262:31092): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997066.624:31093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997066.629:31094): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997066.633:31095): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997066.638:31096): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997066.759:31097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997066.899:31098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997066.936:31099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997067.000:31100): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997067.978:31101): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=306929 suid=74 rport=34644 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997067.982:31102): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306929 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997067.983:31103): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=306928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997067.983:31104): pid=306928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997070.892:31105): pid=307451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=307451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997070.905:31106): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=307451 suid=74 rport=47124 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997070.905:31107): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=307451 suid=74 rport=47124 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997070.987:31108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997070.994:31109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997070.997:31110): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.116:31111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.119:31112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.124:31113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.221:31114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.225:31115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997071.344:31116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.347:31117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.391:31118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.407:31119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.420:31120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.534:31121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.580:31122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.618:31123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997071.726:31124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997073.153:31125): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=307451 suid=74 rport=47124 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997073.154:31126): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=307451 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997073.155:31127): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=307450 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997073.155:31128): pid=307450 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.633:31129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.636:31130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.640:31131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.644:31132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.648:31133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.651:31134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997074.788:31135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997074.833:31136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997074.983:31137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997075.017:31138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997075.070:31139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997075.121:31140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997075.172:31141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997075.268:31142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997077.736:31143): pid=308079 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997077.750:31144): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308079 suid=74 rport=44954 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997077.750:31145): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308079 suid=74 rport=44954 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997077.858:31146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997077.866:31147): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="yunwei" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997078.035:31148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997080.989:31149): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308079 suid=74 rport=44954 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997080.990:31150): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308079 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997080.992:31151): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997080.992:31152): pid=308078 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997081.626:31153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997082.171:31154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997084.449:31155): pid=308618 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997084.463:31156): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308618 suid=74 rport=44966 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997084.463:31157): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308618 suid=74 rport=44966 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997084.566:31158): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997088.204:31159): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308618 suid=74 rport=44966 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997088.204:31160): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308618 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997088.206:31161): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997088.206:31162): pid=308617 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997091.109:31163): pid=308864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997091.123:31164): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308864 suid=74 rport=59858 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997091.123:31165): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=308864 suid=74 rport=59858 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997091.204:31166): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="dmdba" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997094.724:31167): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=308864 suid=74 rport=59858 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997094.724:31168): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308864 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997094.726:31169): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=308863 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997094.726:31170): pid=308863 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997097.627:31171): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997097.633:31172): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997097.638:31173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997097.643:31174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997097.794:31175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997097.853:31176): pid=309448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=309448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997097.870:31177): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=309448 suid=74 rport=59120 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997097.871:31178): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=309448 suid=74 rport=59120 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997097.883:31179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997097.933:31180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997097.950:31181): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="localhost" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997097.954:31182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997100.212:31183): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=309448 suid=74 rport=59120 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997100.213:31184): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=309448 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997100.214:31185): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=309443 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997100.214:31186): pid=309443 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.633:31187): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.638:31188): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.643:31189): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.647:31190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.651:31191): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.655:31192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.666:31193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997101.759:31194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997101.857:31195): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997101.888:31196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997101.979:31197): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997102.078:31198): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997102.132:31199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997102.153:31200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997102.191:31201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997102.293:31202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997104.560:31203): pid=310044 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310044 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997104.577:31204): pid=310045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997104.591:31205): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310045 suid=74 rport=59136 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997104.591:31206): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310045 suid=74 rport=59136 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997104.685:31207): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="hu" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773997104.713:31208): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=310044 suid=74 rport=56304 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997104.713:31209): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=310044 suid=74 rport=56304 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997105.513:31210): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.624:31211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.627:31212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.630:31213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.632:31214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.635:31215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.638:31216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997105.641:31217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997105.901:31218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997105.959:31219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997105.995:31220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997106.008:31221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997106.022:31222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997106.071:31223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997106.150:31224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997106.516:31225): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310045 suid=74 rport=59136 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997106.516:31226): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310045 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997106.518:31227): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310043 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997106.518:31228): pid=310043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997108.621:31229): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997108.874:31230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997109.645:31231): pid=310403 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997111.153:31232): pid=310552 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310552 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997111.168:31233): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310552 suid=74 rport=55170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997111.168:31234): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310552 suid=74 rport=55170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997111.251:31235): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997111.253:31236): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997111.525:31237): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310044 suid=74 rport=56304 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997111.525:31238): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310044 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997111.526:31239): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310042 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997111.526:31240): pid=310042 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997111.806:31241): pid=310592 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310592 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997111.808:31242): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=310592 suid=74 rport=54764 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997111.808:31243): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=310592 suid=74 rport=54764 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997112.623:31244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997113.167:31245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997113.304:31246): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997114.509:31247): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310552 suid=74 rport=55170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997114.510:31248): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310552 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997114.511:31249): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997114.511:31250): pid=310551 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997117.463:31251): pid=310906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997117.782:31252): pid=310943 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310943 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997117.795:31253): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310943 suid=74 rport=43972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997117.795:31254): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=310943 suid=74 rport=43972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997117.890:31255): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="alex" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997119.503:31256): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997119.880:31257): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310592 suid=74 rport=54764 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997119.880:31258): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310592 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997119.882:31259): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310573 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997119.882:31260): pid=310573 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997120.532:31261): pid=311126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997120.533:31262): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=311126 suid=74 rport=47690 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997120.533:31263): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=311126 suid=74 rport=47690 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997120.801:31264): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=310943 suid=74 rport=43972 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997120.802:31265): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310943 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997120.803:31266): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=310927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997120.803:31267): pid=310927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997121.989:31268): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997124.440:31269): pid=311278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997124.451:31270): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=311278 suid=74 rport=43982 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997124.451:31271): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=311278 suid=74 rport=43982 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997124.535:31272): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997126.360:31273): pid=311361 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997126.693:31274): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311278 suid=74 rport=43982 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997126.694:31275): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311278 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997126.695:31276): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997126.695:31277): pid=311277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997128.638:31278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997128.643:31279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997128.647:31280): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997128.651:31281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997128.780:31282): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997128.831:31283): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997128.859:31284): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997128.864:31285): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997128.947:31286): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997129.101:31287): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311126 suid=74 rport=47690 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997129.102:31288): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311126 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997129.103:31289): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997129.104:31290): pid=311109 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997129.405:31291): pid=311703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997129.407:31292): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=311703 suid=74 rport=50630 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997129.407:31293): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=311703 suid=74 rport=50630 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997130.659:31294): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997131.209:31295): pid=311790 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997131.222:31296): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=311790 suid=74 rport=52062 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997131.223:31297): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=311790 suid=74 rport=52062 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997131.302:31298): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.629:31299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.633:31300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.637:31301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.641:31302): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.645:31303): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.650:31304): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.654:31305): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997132.657:31306): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997132.945:31307): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997132.959:31308): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.071:31309): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.096:31310): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.105:31311): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.112:31312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.155:31313): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997133.184:31314): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997135.015:31315): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311790 suid=74 rport=52062 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997135.015:31316): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311790 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997135.016:31317): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311788 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997135.016:31318): pid=311788 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997135.295:31319): pid=312191 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.672:31320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.676:31321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.680:31322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.684:31323): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.687:31324): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.691:31325): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997136.695:31326): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997136.973:31327): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.028:31328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.077:31329): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.084:31330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.134:31331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.179:31332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997137.184:31333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997137.337:31334): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997137.938:31335): pid=312418 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312418 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997137.951:31336): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=312418 suid=74 rport=37710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997137.952:31337): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=312418 suid=74 rport=37710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997137.959:31338): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=311703 suid=74 rport=50630 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997137.959:31339): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311703 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997137.960:31340): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=311693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997137.960:31341): pid=311693 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997138.048:31342): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="postgres" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997138.317:31343): pid=312478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997138.318:31344): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=312478 suid=74 rport=43918 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997138.318:31345): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256@libssh.org spid=312478 suid=74 rport=43918 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997139.625:31346): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997139.835:31347): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997139.848:31348): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997141.283:31349): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312418 suid=74 rport=37710 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997141.284:31350): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312418 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997141.285:31351): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997141.285:31352): pid=312417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997143.624:31353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997144.114:31354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997144.621:31355): pid=313006 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=176.120.22.47 addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997144.663:31356): pid=313017 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313017 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997144.676:31357): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313017 suid=74 rport=37720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997144.676:31358): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313017 suid=74 rport=37720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997144.764:31359): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin123" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997147.593:31360): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=challenge-response acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997147.882:31361): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=312478 suid=74 rport=43918 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997147.883:31362): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312478 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997147.885:31363): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=312419 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997147.885:31364): pid=312419 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=176.120.22.47 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997148.981:31365): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313017 suid=74 rport=37720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997148.981:31366): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313017 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997148.983:31367): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313016 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997148.983:31368): pid=313016 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997151.469:31369): pid=313264 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313264 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997151.482:31370): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313264 suid=74 rport=36808 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997151.482:31371): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313264 suid=74 rport=36808 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997152.152:31372): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="pg" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997155.460:31373): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313264 suid=74 rport=36808 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997155.460:31374): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313264 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997155.461:31375): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313263 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997155.461:31376): pid=313263 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997158.080:31377): pid=313784 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997158.095:31378): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313784 suid=74 rport=46338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997158.095:31379): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=313784 suid=74 rport=46338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997158.371:31380): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ubuntu" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997159.623:31381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997159.625:31382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997159.627:31383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997159.629:31384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997159.769:31385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997159.801:31386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997159.838:31387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997160.014:31388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997161.626:31389): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=313784 suid=74 rport=46338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997161.627:31390): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313784 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997161.628:31391): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=313783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997161.628:31392): pid=313783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.628:31393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.632:31394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.634:31395): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.637:31396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.639:31397): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.642:31398): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.648:31399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997163.650:31400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997163.923:31401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997163.943:31402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997163.967:31403): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997163.998:31404): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997164.055:31405): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997164.071:31406): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997164.199:31407): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997164.256:31408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997164.739:31409): pid=314393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997164.752:31410): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=314393 suid=74 rport=46348 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997164.752:31411): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=314393 suid=74 rport=46348 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997164.864:31412): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.628:31413): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.632:31414): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.636:31415): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.639:31416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.643:31417): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.646:31418): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997167.649:31419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997167.825:31420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997167.902:31421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997167.924:31422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997168.027:31423): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997168.118:31424): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997168.183:31425): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997168.250:31426): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997168.491:31427): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=314393 suid=74 rport=46348 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997168.492:31428): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314393 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997168.494:31429): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997168.494:31430): pid=314392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997170.885:31431): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997171.089:31432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997171.509:31433): pid=314949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997171.808:31434): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=314949 suid=74 rport=35824 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997171.808:31435): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=314949 suid=74 rport=35824 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997172.018:31436): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="oscar" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997174.386:31437): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=314949 suid=74 rport=35824 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997174.386:31438): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314949 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997174.387:31439): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=314942 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997174.387:31440): pid=314942 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997174.413:31441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997174.979:31442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997178.135:31443): pid=315289 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315289 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997178.146:31444): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=315289 suid=74 rport=49158 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997178.146:31445): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=315289 suid=74 rport=49158 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997178.472:31446): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin2" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997180.126:31447): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997181.328:31448): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=315289 suid=74 rport=49158 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997181.328:31449): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315289 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997181.329:31450): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315267 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997181.329:31451): pid=315267 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997184.836:31452): pid=315854 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315854 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997184.850:31453): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=315854 suid=74 rport=49170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997184.850:31454): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=315854 suid=74 rport=49170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997184.945:31455): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ec2-user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997188.628:31456): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=315854 suid=74 rport=49170 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997188.629:31457): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315854 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997188.630:31458): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=315853 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997188.630:31459): pid=315853 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997190.630:31460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997190.635:31461): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997190.639:31462): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997190.644:31463): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997190.895:31464): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997190.933:31465): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997190.943:31466): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997190.955:31467): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997191.685:31468): pid=316181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997191.699:31469): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=316181 suid=74 rport=42872 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997191.700:31470): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=316181 suid=74 rport=42872 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997191.792:31471): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="elasticsearch" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.631:31472): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.633:31473): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.634:31474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.637:31475): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.638:31476): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.640:31477): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.642:31478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997194.644:31479): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997194.688:31480): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316181 suid=74 rport=42872 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997194.688:31481): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316181 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997194.689:31482): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997194.689:31483): pid=316180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997194.891:31484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997194.908:31485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.023:31486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.076:31487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.161:31488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.172:31489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.246:31490): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997195.251:31491): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997195.419:31492): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997198.389:31493): pid=316713 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316713 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997198.401:31494): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=316713 suid=74 rport=35354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997198.402:31495): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=316713 suid=74 rport=35354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997198.512:31496): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.629:31497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.634:31498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.639:31499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.643:31500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.647:31501): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.651:31502): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997198.654:31503): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997198.912:31504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.031:31505): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.062:31506): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.095:31507): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.113:31508): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.151:31509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997199.202:31510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997200.663:31511): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1773997201.571:31512): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_ACQ msg=audit(1773997201.572:31513): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_START msg=audit(1773997201.573:31514): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=CRED_REFR msg=audit(1773997201.573:31515): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_START msg=audit(1773997201.621:31516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997201.828:31517): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997202.137:31518): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=316713 suid=74 rport=35354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997202.138:31519): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316713 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997202.139:31520): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=316712 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997202.139:31521): pid=316712 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997202.297:31522): pid=317026 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317026 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997202.299:31523): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317026 suid=74 rport=58190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997202.299:31524): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317026 suid=74 rport=58190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997202.390:31525): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997202.390:31526): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997202.421:31527): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997202.421:31528): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317026 suid=74 rport=58190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997202.424:31529): pid=317025 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997202.424:31530): pid=317025 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=182 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997202.424:31530): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffb33e2930 a2=1 a3=0 items=0 ppid=38931 pid=317025 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=182 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997202.424:31530): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997202.426:31531): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997202.474:31532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997202.520:31533): pid=317029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997202.520:31534): pid=317029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773997202.521:31535): pid=317029 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997202.521:31536): pid=317029 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=183 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997202.521:31536): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=317029 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=183 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997202.521:31536): proctitle="(systemd)"
type=USER_START msg=audit(1773997202.524:31537): pid=317029 uid=0 auid=0 ses=183 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997202.547:31538): prog-id=1505 op=LOAD
type=SYSCALL msg=audit(1773997202.547:31538): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbb306a70 a2=90 a3=0 items=0 ppid=1 pid=317029 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=183 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997202.547:31538): proctitle="(systemd)"
type=BPF msg=audit(1773997202.548:31539): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997202.548:31540): prog-id=1506 op=LOAD
type=SYSCALL msg=audit(1773997202.548:31540): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbb306b10 a2=90 a3=4 items=0 ppid=1 pid=317029 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=183 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997202.548:31540): proctitle="(systemd)"
type=BPF msg=audit(1773997202.548:31541): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997202.764:31542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997202.784:31543): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.785:31544): pid=317045 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997202.787:31545): pid=317045 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997202.831:31546): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997202.831:31547): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.833:31548): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997202.902:31549): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997202.902:31550): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997202.903:31551): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997202.908:31552): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997202.923:31553): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997202.923:31554): pid=317046 uid=0 auid=0 ses=182 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.927:31555): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317045 suid=0 rport=58190 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.927:31556): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997202.929:31557): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997202.930:31558): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997202.931:31559): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997202.931:31560): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.931:31561): pid=317025 uid=0 auid=0 ses=182 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317025 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997202.953:31562): pid=317062 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317062 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997202.954:31563): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317062 suid=74 rport=58202 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997202.954:31564): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317062 suid=74 rport=58202 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997203.040:31565): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997203.040:31566): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997203.069:31567): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997203.070:31568): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317062 suid=74 rport=58202 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997203.073:31569): pid=317061 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997203.073:31570): pid=317061 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=184 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997203.073:31570): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe7c8437b0 a2=1 a3=0 items=0 ppid=38931 pid=317061 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=184 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997203.073:31570): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997203.075:31571): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997203.113:31572): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997203.114:31573): pid=317064 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317064 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997203.115:31574): pid=317064 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997203.158:31575): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997203.158:31576): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997203.160:31577): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997203.222:31578): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997203.223:31579): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997203.223:31580): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997203.226:31581): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997203.400:31582): prog-id=1507 op=LOAD
type=SYSCALL msg=audit(1773997203.400:31582): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdaff2f680 a2=90 a3=9500000000 items=0 ppid=317093 pid=317094 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997203.400:31582): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F373335303231396334626563316536313039336331346437666361316361
type=SERVICE_START msg=audit(1773997203.472:31583): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997203.481:31584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_horizon comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997203.483:31585): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997203.483:31586): pid=317065 uid=0 auid=0 ses=184 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997203.486:31587): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317064 suid=0 rport=58202 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997203.487:31588): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317064 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997203.490:31589): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997203.490:31590): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997203.491:31591): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997203.491:31592): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997203.491:31593): pid=317061 uid=0 auid=0 ses=184 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317061 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997203.586:31594): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997205.163:31595): pid=317181 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317181 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997205.176:31596): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317181 suid=74 rport=35370 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997205.177:31597): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317181 suid=74 rport=35370 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997205.593:31598): pid=317185 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317185 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997205.595:31599): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317185 suid=74 rport=58210 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997205.595:31600): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317185 suid=74 rport=58210 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997205.624:31601): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997205.627:31602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997205.675:31603): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997205.675:31604): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997205.694:31605): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997205.695:31606): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317185 suid=74 rport=58210 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997205.696:31607): pid=317184 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997205.697:31608): pid=317184 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=185 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997205.697:31608): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff59849400 a2=1 a3=0 items=0 ppid=38931 pid=317184 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=185 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997205.697:31608): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997205.698:31609): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997205.720:31610): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.722:31611): pid=317201 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997205.723:31612): pid=317201 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997205.767:31613): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997205.768:31614): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.771:31615): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997205.826:31616): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997205.826:31617): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997205.828:31618): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997205.832:31619): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997205.843:31620): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997205.846:31621): pid=317214 uid=0 auid=0 ses=185 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.849:31622): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317201 suid=0 rport=58210 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.849:31623): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317201 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997205.852:31624): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997205.852:31625): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997205.852:31626): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997205.853:31627): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.853:31628): pid=317184 uid=0 auid=0 ses=185 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317184 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997205.878:31629): pid=317230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997205.879:31630): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317230 suid=74 rport=58212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997205.879:31631): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317230 suid=74 rport=58212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997205.958:31632): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997205.958:31633): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997205.991:31634): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997205.992:31635): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317230 suid=74 rport=58212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997205.994:31636): pid=317229 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997205.994:31637): pid=317229 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=186 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997205.994:31637): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf3c5ce50 a2=1 a3=0 items=0 ppid=38931 pid=317229 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=186 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997205.994:31637): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997205.996:31638): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997206.026:31639): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997206.027:31640): pid=317233 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997206.028:31641): pid=317233 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997206.071:31642): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997206.071:31643): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997206.073:31644): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997206.122:31645): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997206.123:31646): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997206.123:31647): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997206.126:31648): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997206.190:31649): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997206.276:31650): prog-id=1508 op=LOAD
type=SYSCALL msg=audit(1773997206.276:31650): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd6413eed0 a2=90 a3=9500000000 items=0 ppid=317262 pid=317263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997206.276:31650): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316237656132306234646339643937636333646331626164313464376534
type=SERVICE_START msg=audit(1773997206.331:31651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997206.345:31652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_keystone comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997206.349:31653): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997206.349:31654): pid=317234 uid=0 auid=0 ses=186 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997206.353:31655): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317233 suid=0 rport=58212 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997206.354:31656): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317233 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997206.357:31657): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997206.357:31658): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997206.358:31659): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997206.358:31660): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997206.358:31661): pid=317229 uid=0 auid=0 ses=186 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997206.497:31662): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997207.500:31663): pid=317318 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317318 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997207.501:31664): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317318 suid=74 rport=51508 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997207.502:31665): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317318 suid=74 rport=51508 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997207.578:31666): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997207.578:31667): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997207.599:31668): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317181 suid=74 rport=35370 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997207.600:31669): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317181 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997207.602:31670): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997207.602:31671): pid=317180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997207.609:31672): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997207.609:31673): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317318 suid=74 rport=51508 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997207.611:31674): pid=317317 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997207.612:31675): pid=317317 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=187 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997207.612:31675): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffed6649c30 a2=1 a3=0 items=0 ppid=38931 pid=317317 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=187 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997207.612:31675): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997207.613:31676): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997207.649:31677): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997207.650:31678): pid=317320 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997207.652:31679): pid=317320 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997207.694:31680): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997207.694:31681): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997207.697:31682): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317321 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997207.779:31683): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997207.779:31684): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997207.780:31685): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997207.785:31686): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997207.799:31687): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997207.799:31688): pid=317321 uid=0 auid=0 ses=187 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997207.802:31689): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317320 suid=0 rport=51508 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997207.802:31690): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997207.805:31691): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997207.805:31692): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997207.806:31693): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997207.806:31694): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997207.806:31695): pid=317317 uid=0 auid=0 ses=187 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317317 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.413:31696): pid=317337 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317337 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997208.415:31697): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317337 suid=74 rport=51524 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997208.415:31698): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317337 suid=74 rport=51524 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997208.494:31699): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997208.494:31700): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997208.523:31701): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997208.523:31702): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317337 suid=74 rport=51524 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997208.525:31703): pid=317336 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997208.525:31704): pid=317336 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=188 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997208.525:31704): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe24b15b30 a2=1 a3=0 items=0 ppid=38931 pid=317336 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=188 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997208.525:31704): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997208.526:31705): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997208.551:31706): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.552:31707): pid=317339 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997208.554:31708): pid=317339 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997208.833:31709): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997208.833:31710): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.834:31711): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317340 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997208.897:31712): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997208.897:31713): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997208.898:31714): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997208.901:31715): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997208.912:31716): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997208.912:31717): pid=317340 uid=0 auid=0 ses=188 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997208.915:31718): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997208.915:31719): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.915:31720): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317339 suid=0 rport=51524 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.915:31721): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997208.918:31722): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997208.918:31723): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997208.919:31724): pid=317336 uid=0 auid=0 ses=188 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317336 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.488:31725): pid=317356 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317356 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997209.489:31726): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317356 suid=74 rport=51534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997209.489:31727): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317356 suid=74 rport=51534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997209.566:31728): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997209.566:31729): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997209.595:31730): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997209.596:31731): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317356 suid=74 rport=51534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997209.599:31732): pid=317355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997209.599:31733): pid=317355 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=189 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997209.599:31733): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd51a99950 a2=1 a3=0 items=0 ppid=38931 pid=317355 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=189 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997209.599:31733): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997209.601:31734): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997209.631:31735): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.632:31736): pid=317358 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997209.634:31737): pid=317358 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997209.679:31738): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997209.679:31739): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.681:31740): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997209.730:31741): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997209.730:31742): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997209.730:31743): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997209.733:31744): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997209.742:31745): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997209.742:31746): pid=317359 uid=0 auid=0 ses=189 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.744:31747): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317358 suid=0 rport=51534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.744:31748): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317358 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997209.746:31749): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997209.747:31750): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997209.748:31751): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997209.748:31752): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997209.748:31753): pid=317355 uid=0 auid=0 ses=189 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997210.828:31754): pid=317375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997210.830:31755): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317375 suid=74 rport=51540 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997210.830:31756): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317375 suid=74 rport=51540 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997210.910:31757): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997210.910:31758): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997210.939:31759): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997210.940:31760): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317375 suid=74 rport=51540 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997210.943:31761): pid=317374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997210.943:31762): pid=317374 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=190 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997210.943:31762): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde1a273b0 a2=1 a3=0 items=0 ppid=38931 pid=317374 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=190 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997210.943:31762): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997210.944:31763): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997210.980:31764): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997210.981:31765): pid=317377 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997210.982:31766): pid=317377 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997211.025:31767): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997211.025:31768): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.027:31769): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997211.091:31770): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997211.091:31771): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997211.092:31772): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997211.094:31773): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997211.108:31774): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997211.108:31775): pid=317378 uid=0 auid=0 ses=190 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.111:31776): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317377 suid=0 rport=51540 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.111:31777): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997211.114:31778): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997211.114:31779): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997211.115:31780): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997211.115:31781): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.115:31782): pid=317374 uid=0 auid=0 ses=190 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.140:31783): pid=317394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997211.141:31784): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317394 suid=74 rport=51546 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997211.141:31785): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317394 suid=74 rport=51546 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997211.221:31786): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997211.222:31787): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997211.250:31788): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997211.251:31789): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317394 suid=74 rport=51546 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997211.253:31790): pid=317393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997211.253:31791): pid=317393 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=191 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997211.253:31791): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff3fabecc0 a2=1 a3=0 items=0 ppid=38931 pid=317393 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=191 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997211.253:31791): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997211.254:31792): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997211.288:31793): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.289:31794): pid=317396 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997211.290:31795): pid=317396 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997211.332:31796): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997211.332:31797): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.334:31798): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997211.391:31799): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997211.391:31800): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997211.392:31801): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997211.394:31802): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997211.560:31803): prog-id=1509 op=LOAD
type=SYSCALL msg=audit(1773997211.560:31803): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd8743c020 a2=90 a3=9500000000 items=0 ppid=317426 pid=317427 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997211.560:31803): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F346665356237666134386164363930326265383230373531393533336637
type=SERVICE_START msg=audit(1773997211.639:31804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997211.656:31805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997211.660:31806): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997211.660:31807): pid=317397 uid=0 auid=0 ses=191 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.664:31808): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317396 suid=0 rport=51546 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.664:31809): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317396 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997211.668:31810): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997211.668:31811): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997211.669:31812): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997211.669:31813): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.669:31814): pid=317393 uid=0 auid=0 ses=191 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997211.859:31815): pid=317477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997211.871:31816): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317477 suid=74 rport=54028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997211.871:31817): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317477 suid=74 rport=54028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997211.959:31818): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997213.292:31819): pid=317516 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317516 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997213.293:31820): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317516 suid=74 rport=51560 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997213.294:31821): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317516 suid=74 rport=51560 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997213.375:31822): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997213.375:31823): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997213.403:31824): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997213.403:31825): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317516 suid=74 rport=51560 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997213.406:31826): pid=317515 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997213.406:31827): pid=317515 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=192 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997213.406:31827): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd9ca62c30 a2=1 a3=0 items=0 ppid=38931 pid=317515 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=192 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997213.406:31827): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997213.408:31828): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997213.446:31829): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.447:31830): pid=317518 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997213.449:31831): pid=317518 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997213.492:31832): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997213.492:31833): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.496:31834): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317519 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997213.541:31835): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997213.542:31836): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997213.543:31837): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997213.547:31838): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997213.558:31839): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997213.559:31840): pid=317519 uid=0 auid=0 ses=192 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.561:31841): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317518 suid=0 rport=51560 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.562:31842): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317518 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997213.564:31843): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997213.565:31844): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997213.565:31845): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997213.566:31846): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.566:31847): pid=317515 uid=0 auid=0 ses=192 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317515 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.589:31848): pid=317535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997213.590:31849): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317535 suid=74 rport=51562 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997213.590:31850): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317535 suid=74 rport=51562 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997213.682:31851): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997213.682:31852): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997213.711:31853): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997213.711:31854): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317535 suid=74 rport=51562 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997213.714:31855): pid=317534 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997213.714:31856): pid=317534 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=193 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997213.714:31856): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffeb7c5d2d0 a2=1 a3=0 items=0 ppid=38931 pid=317534 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=193 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997213.714:31856): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997213.716:31857): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997213.749:31858): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.751:31859): pid=317537 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997213.752:31860): pid=317537 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997213.795:31861): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997213.795:31862): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997213.797:31863): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317538 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997213.865:31864): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997213.866:31865): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997213.867:31866): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997213.870:31867): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997214.020:31868): prog-id=1510 op=LOAD
type=SYSCALL msg=audit(1773997214.020:31868): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdfdc70000 a2=90 a3=9500000000 items=0 ppid=317568 pid=317569 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997214.020:31868): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F643934386364623464616661343934636233303764333765643232323765
type=SERVICE_START msg=audit(1773997214.084:31869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997214.096:31870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997214.099:31871): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997214.099:31872): pid=317538 uid=0 auid=0 ses=193 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997214.103:31873): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317537 suid=0 rport=51562 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997214.104:31874): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317537 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997214.108:31875): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997214.109:31876): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997214.110:31877): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997214.110:31878): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997214.110:31879): pid=317534 uid=0 auid=0 ses=193 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317534 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997214.257:31880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997215.600:31881): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317477 suid=74 rport=54028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997215.601:31882): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317477 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997215.602:31883): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317476 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997215.602:31884): pid=317476 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997215.784:31885): pid=317597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997215.786:31886): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317597 suid=74 rport=51574 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997215.786:31887): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317597 suid=74 rport=51574 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997215.870:31888): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997215.870:31889): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997215.900:31890): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997215.900:31891): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317597 suid=74 rport=51574 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997215.903:31892): pid=317596 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997215.903:31893): pid=317596 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=194 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997215.903:31893): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd613ba280 a2=1 a3=0 items=0 ppid=38931 pid=317596 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=194 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997215.903:31893): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997215.905:31894): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997215.940:31895): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997215.941:31896): pid=317599 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997215.944:31897): pid=317599 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997215.986:31898): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997215.986:31899): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997215.988:31900): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997216.050:31901): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997216.050:31902): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997216.051:31903): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997216.057:31904): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997216.071:31905): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997216.072:31906): pid=317600 uid=0 auid=0 ses=194 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.076:31907): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317599 suid=0 rport=51574 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.076:31908): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997216.079:31909): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997216.080:31910): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997216.080:31911): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997216.081:31912): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.081:31913): pid=317596 uid=0 auid=0 ses=194 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317596 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.105:31914): pid=317616 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997216.107:31915): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317616 suid=74 rport=51580 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997216.107:31916): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317616 suid=74 rport=51580 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997216.183:31917): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997216.183:31918): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997216.207:31919): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997216.207:31920): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317616 suid=74 rport=51580 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997216.209:31921): pid=317615 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997216.209:31922): pid=317615 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=195 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997216.209:31922): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdb3943db0 a2=1 a3=0 items=0 ppid=38931 pid=317615 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=195 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997216.209:31922): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997216.211:31923): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997216.242:31924): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.243:31925): pid=317618 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997216.244:31926): pid=317618 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997216.287:31927): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997216.287:31928): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.289:31929): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317619 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997216.353:31930): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997216.353:31931): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997216.354:31932): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997216.357:31933): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997216.521:31934): prog-id=1511 op=LOAD
type=SYSCALL msg=audit(1773997216.521:31934): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd290225e0 a2=90 a3=9500000000 items=0 ppid=317649 pid=317650 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997216.521:31934): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363831646661616138306239316336653532323739643563623763633138
type=SERVICE_START msg=audit(1773997216.598:31935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997216.614:31936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_cinder_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997216.617:31937): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997216.618:31938): pid=317619 uid=0 auid=0 ses=195 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.622:31939): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317618 suid=0 rport=51580 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.622:31940): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317618 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997216.625:31941): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997216.626:31942): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997216.626:31943): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997216.626:31944): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997216.627:31945): pid=317615 uid=0 auid=0 ses=195 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317615 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997216.765:31946): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997217.755:31947): pid=317680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317680 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997217.756:31948): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317680 suid=74 rport=52060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997217.756:31949): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317680 suid=74 rport=52060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997217.831:31950): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997217.831:31951): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997217.861:31952): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997217.861:31953): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317680 suid=74 rport=52060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997217.864:31954): pid=317679 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997217.864:31955): pid=317679 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=196 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997217.864:31955): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4fc631a0 a2=1 a3=0 items=0 ppid=38931 pid=317679 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=196 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997217.864:31955): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997217.866:31956): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997217.893:31957): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997217.894:31958): pid=317682 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997217.896:31959): pid=317682 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997217.939:31960): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997217.939:31961): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997217.941:31962): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317683 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997218.003:31963): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997218.003:31964): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997218.004:31965): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997218.009:31966): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997218.023:31967): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997218.024:31968): pid=317683 uid=0 auid=0 ses=196 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.026:31969): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317682 suid=0 rport=52060 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.026:31970): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997218.028:31971): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997218.029:31972): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997218.030:31973): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997218.030:31974): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.030:31975): pid=317679 uid=0 auid=0 ses=196 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.603:31976): pid=317699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997218.617:31977): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317699 suid=74 rport=54714 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997218.617:31978): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317699 suid=74 rport=54714 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997218.654:31979): pid=317701 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317701 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997218.656:31980): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317701 suid=74 rport=52064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997218.656:31981): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317701 suid=74 rport=52064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997218.705:31982): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="steam" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997218.737:31983): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997218.737:31984): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997218.767:31985): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997218.768:31986): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317701 suid=74 rport=52064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997218.770:31987): pid=317700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997218.770:31988): pid=317700 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=197 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997218.770:31988): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe65b0dc30 a2=1 a3=0 items=0 ppid=38931 pid=317700 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=197 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997218.770:31988): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997218.771:31989): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997218.797:31990): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.799:31991): pid=317703 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997218.800:31992): pid=317703 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997218.843:31993): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997218.843:31994): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.844:31995): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997218.909:31996): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997218.909:31997): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997218.910:31998): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997218.913:31999): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997218.926:32000): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997218.927:32001): pid=317704 uid=0 auid=0 ses=197 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.930:32002): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317703 suid=0 rport=52064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.930:32003): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997218.933:32004): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997218.933:32005): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997218.934:32006): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997218.934:32007): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997218.934:32008): pid=317700 uid=0 auid=0 ses=197 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997219.756:32009): pid=317720 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997219.756:32010): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317720 suid=74 rport=52066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997219.757:32011): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317720 suid=74 rport=52066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997219.831:32012): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997219.831:32013): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997219.859:32014): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997219.860:32015): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317720 suid=74 rport=52066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997219.862:32016): pid=317719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997219.862:32017): pid=317719 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=198 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997219.862:32017): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde7947a00 a2=1 a3=0 items=0 ppid=38931 pid=317719 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=198 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997219.862:32017): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997219.863:32018): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997219.894:32019): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997219.895:32020): pid=317722 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997219.896:32021): pid=317722 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997219.939:32022): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997219.939:32023): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997219.941:32024): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317723 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997220.000:32025): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997220.000:32026): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997220.001:32027): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997220.004:32028): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997220.016:32029): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997220.017:32030): pid=317723 uid=0 auid=0 ses=198 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.020:32031): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317722 suid=0 rport=52066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.020:32032): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997220.022:32033): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997220.023:32034): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997220.023:32035): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997220.024:32036): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.024:32037): pid=317719 uid=0 auid=0 ses=198 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.605:32038): pid=317739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997220.606:32039): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317739 suid=74 rport=52074 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997220.607:32040): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317739 suid=74 rport=52074 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997220.686:32041): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997220.686:32042): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997220.716:32043): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997220.717:32044): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317739 suid=74 rport=52074 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997220.719:32045): pid=317738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997220.719:32046): pid=317738 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=199 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997220.719:32046): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd63692f90 a2=1 a3=0 items=0 ppid=38931 pid=317738 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=199 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997220.719:32046): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997220.720:32047): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997220.749:32048): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.751:32049): pid=317741 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997220.752:32050): pid=317741 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.791:32051): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317699 suid=74 rport=54714 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997220.791:32052): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317699 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997220.793:32053): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317698 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997220.793:32054): pid=317698 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997220.795:32055): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997220.795:32056): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.796:32057): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317742 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997220.862:32058): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997220.862:32059): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997220.863:32060): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997220.866:32061): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997220.881:32062): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997220.881:32063): pid=317742 uid=0 auid=0 ses=199 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.883:32064): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317741 suid=0 rport=52074 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.884:32065): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317741 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997220.886:32066): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997220.887:32067): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997220.887:32068): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997220.887:32069): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997220.887:32070): pid=317738 uid=0 auid=0 ses=199 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.510:32071): pid=317758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997221.511:32072): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317758 suid=74 rport=52082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997221.512:32073): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317758 suid=74 rport=52082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997221.592:32074): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997221.592:32075): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997221.626:32076): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997221.627:32077): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317758 suid=74 rport=52082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997221.627:32078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997221.630:32079): pid=317757 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997221.630:32080): pid=317757 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=200 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997221.630:32080): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe1e012720 a2=1 a3=0 items=0 ppid=38931 pid=317757 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=200 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997221.630:32080): proctitle=737368643A20726F6F74205B707269765D
type=SERVICE_START msg=audit(1773997221.631:32081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773997221.631:32082): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997221.634:32083): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997221.638:32084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997221.659:32085): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.660:32086): pid=317783 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997221.662:32087): pid=317783 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997221.705:32088): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997221.705:32089): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.707:32090): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997221.770:32091): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997221.770:32092): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997221.772:32093): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997221.780:32094): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997221.796:32095): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997221.796:32096): pid=317805 uid=0 auid=0 ses=200 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.800:32097): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317783 suid=0 rport=52082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.801:32098): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997221.810:32099): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997221.811:32100): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997221.811:32101): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997221.811:32102): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997221.812:32103): pid=317757 uid=0 auid=0 ses=200 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317757 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997221.812:32104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997221.826:32105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997222.005:32106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997222.021:32107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997222.048:32108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997222.419:32109): pid=317859 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317859 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997222.421:32110): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317859 suid=74 rport=52088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997222.421:32111): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317859 suid=74 rport=52088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997222.508:32112): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997222.508:32113): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997222.537:32114): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997222.537:32115): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317859 suid=74 rport=52088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997222.540:32116): pid=317858 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997222.540:32117): pid=317858 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=201 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997222.540:32117): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc426d3c0 a2=1 a3=0 items=0 ppid=38931 pid=317858 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=201 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997222.540:32117): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997222.541:32118): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997222.573:32119): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997222.574:32120): pid=317861 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997222.575:32121): pid=317861 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997222.618:32122): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997222.618:32123): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997222.619:32124): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317862 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997222.687:32125): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997222.687:32126): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997222.689:32127): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997222.693:32128): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997222.707:32129): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997222.707:32130): pid=317862 uid=0 auid=0 ses=201 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997222.711:32131): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317861 suid=0 rport=52088 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997222.711:32132): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997222.714:32133): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997222.714:32134): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997222.715:32135): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997222.715:32136): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997222.715:32137): pid=317858 uid=0 auid=0 ses=201 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317858 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.339:32138): pid=317878 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317878 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997223.340:32139): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317878 suid=74 rport=52096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997223.340:32140): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317878 suid=74 rport=52096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997223.419:32141): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997223.419:32142): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997223.448:32143): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997223.448:32144): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317878 suid=74 rport=52096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997223.451:32145): pid=317877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997223.451:32146): pid=317877 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=202 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997223.451:32146): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdf26a0060 a2=1 a3=0 items=0 ppid=38931 pid=317877 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=202 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997223.451:32146): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997223.452:32147): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997223.484:32148): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.485:32149): pid=317880 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997223.487:32150): pid=317880 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997223.529:32151): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997223.529:32152): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.532:32153): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317881 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997223.597:32154): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997223.598:32155): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997223.599:32156): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997223.601:32157): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997223.611:32158): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997223.612:32159): pid=317881 uid=0 auid=0 ses=202 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.614:32160): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317880 suid=0 rport=52096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.614:32161): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317880 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997223.617:32162): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997223.617:32163): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997223.618:32164): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997223.618:32165): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997223.618:32166): pid=317877 uid=0 auid=0 ses=202 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.227:32167): pid=317897 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317897 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997224.229:32168): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317897 suid=74 rport=52102 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997224.229:32169): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=317897 suid=74 rport=52102 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997224.305:32170): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997224.305:32171): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997224.334:32172): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997224.336:32173): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317897 suid=74 rport=52102 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997224.339:32174): pid=317896 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997224.339:32175): pid=317896 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=203 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997224.339:32175): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd2def1450 a2=1 a3=0 items=0 ppid=38931 pid=317896 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=203 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997224.339:32175): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997224.341:32176): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997224.370:32177): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.372:32178): pid=317899 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997224.374:32179): pid=317899 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997224.416:32180): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997224.416:32181): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.417:32182): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317900 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997224.484:32183): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997224.484:32184): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997224.486:32185): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997224.489:32186): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997224.504:32187): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997224.504:32188): pid=317900 uid=0 auid=0 ses=203 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.507:32189): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317899 suid=0 rport=52102 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.507:32190): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317899 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997224.510:32191): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997224.511:32192): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997224.512:32193): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997224.512:32194): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997224.512:32195): pid=317896 uid=0 auid=0 ses=203 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.320:32196): pid=317916 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317916 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997225.333:32197): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317916 suid=74 rport=54724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997225.333:32198): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=317916 suid=74 rport=54724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997225.424:32199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.427:32200): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.431:32201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.435:32202): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.438:32203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.442:32204): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.445:32205): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997225.449:32206): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997225.456:32207): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="ai" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997225.615:32208): pid=318013 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318013 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997225.616:32209): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318013 suid=74 rport=52108 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997225.623:32210): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318013 suid=74 rport=52108 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997225.673:32211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997225.725:32212): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997225.725:32213): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997225.753:32214): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997225.754:32215): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318013 suid=74 rport=52108 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997225.758:32216): pid=318009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997225.758:32217): pid=318009 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=204 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997225.758:32217): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff7e0cb9e0 a2=1 a3=0 items=0 ppid=38931 pid=318009 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=204 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997225.758:32217): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997225.759:32218): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997225.805:32219): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.807:32220): pid=318087 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997225.809:32221): pid=318087 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997225.827:32222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997225.837:32223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997225.854:32224): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997225.854:32225): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.857:32226): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997225.907:32227): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997225.907:32228): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997225.908:32229): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997225.912:32230): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997225.926:32231): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997225.927:32232): pid=318109 uid=0 auid=0 ses=204 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.929:32233): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318087 suid=0 rport=52108 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.930:32234): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318087 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997225.933:32235): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997225.933:32236): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997225.934:32237): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997225.934:32238): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997225.934:32239): pid=318009 uid=0 auid=0 ses=204 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997225.940:32240): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997225.952:32241): pid=318146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997225.953:32242): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318146 suid=74 rport=52110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997225.953:32243): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318146 suid=74 rport=52110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997225.974:32244): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997226.004:32245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997226.030:32246): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997226.030:32247): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997226.049:32248): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997226.050:32249): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997226.050:32250): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318146 suid=74 rport=52110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997226.053:32251): pid=318145 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997226.053:32252): pid=318145 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=205 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997226.053:32252): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd762ae430 a2=1 a3=0 items=0 ppid=38931 pid=318145 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=205 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997226.053:32252): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997226.054:32253): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997226.081:32254): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997226.082:32255): pid=318155 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997226.083:32256): pid=318155 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997226.092:32257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997226.126:32258): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997226.126:32259): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997226.128:32260): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318156 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997226.193:32261): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997226.193:32262): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997226.195:32263): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997226.200:32264): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997226.365:32265): prog-id=1512 op=LOAD
type=SYSCALL msg=audit(1773997226.365:32265): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffdc6063f0 a2=90 a3=9500000000 items=0 ppid=318187 pid=318188 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997226.365:32265): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F376238346536376562633336626333303561393131323636653364363732
type=SERVICE_START msg=audit(1773997226.432:32266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997226.444:32267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_glance_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997226.447:32268): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997226.447:32269): pid=318156 uid=0 auid=0 ses=205 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997226.451:32270): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997226.451:32271): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997226.451:32272): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318155 suid=0 rport=52110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997226.451:32273): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997226.455:32274): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997226.456:32275): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997226.457:32276): pid=318145 uid=0 auid=0 ses=205 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318145 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997226.738:32277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997227.819:32278): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=317916 suid=74 rport=54724 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997227.820:32279): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317916 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997227.821:32280): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=317915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997227.821:32281): pid=317915 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997228.410:32282): pid=318226 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318226 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997228.411:32283): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318226 suid=74 rport=44754 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997228.411:32284): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318226 suid=74 rport=44754 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997228.487:32285): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997228.487:32286): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997228.517:32287): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997228.518:32288): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318226 suid=74 rport=44754 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997228.520:32289): pid=318225 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997228.520:32290): pid=318225 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=206 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997228.520:32290): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd14926ee0 a2=1 a3=0 items=0 ppid=38931 pid=318225 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=206 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997228.520:32290): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997228.522:32291): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997228.563:32292): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.565:32293): pid=318228 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997228.566:32294): pid=318228 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997228.610:32295): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997228.610:32296): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.613:32297): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318229 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997228.674:32298): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997228.674:32299): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997228.675:32300): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997228.680:32301): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997228.697:32302): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997228.698:32303): pid=318229 uid=0 auid=0 ses=206 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.702:32304): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318228 suid=0 rport=44754 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.702:32305): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318228 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997228.704:32306): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997228.704:32307): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997228.705:32308): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997228.705:32309): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.705:32310): pid=318225 uid=0 auid=0 ses=206 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318225 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.728:32311): pid=318245 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318245 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997228.729:32312): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318245 suid=74 rport=44768 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997228.729:32313): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318245 suid=74 rport=44768 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997228.811:32314): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997228.811:32315): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997228.840:32316): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997228.841:32317): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318245 suid=74 rport=44768 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997228.843:32318): pid=318244 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997228.843:32319): pid=318244 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=207 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997228.843:32319): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffacb10520 a2=1 a3=0 items=0 ppid=38931 pid=318244 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=207 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997228.843:32319): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997228.845:32320): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997228.875:32321): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.877:32322): pid=318259 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997228.878:32323): pid=318259 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997228.921:32324): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997228.922:32325): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997228.923:32326): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997228.982:32327): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997228.982:32328): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997228.983:32329): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997228.987:32330): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997228.994:32331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997229.117:32332): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997229.122:32333): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997229.126:32334): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997229.156:32335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997229.153:32336): prog-id=1513 op=LOAD
type=SYSCALL msg=audit(1773997229.153:32336): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf92be200 a2=90 a3=9500000000 items=0 ppid=318347 pid=318349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997229.153:32336): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F656131306562303363646264316466316137663662626364343134393335
type=SERVICE_START msg=audit(1773997229.162:32337): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997229.186:32338): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997229.189:32339): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997229.189:32340): pid=318298 uid=0 auid=0 ses=207 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997229.191:32341): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997229.191:32342): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997229.191:32343): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318259 suid=0 rport=44768 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997229.192:32344): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997229.194:32345): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997229.194:32346): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997229.195:32347): pid=318244 uid=0 auid=0 ses=207 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318244 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997229.225:32348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997229.226:32349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997229.424:32350): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773997229.985:32351): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=USER_END msg=audit(1773997229.985:32352): pid=316982 uid=0 auid=1002 ses=15 subj=unconfined_u:unconfined_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd acct="root" exe="/usr/sbin/crond" hostname=? addr=? terminal=cron res=success'UID="root" AUID="tripleo-admin"
type=SERVICE_STOP msg=audit(1773997230.036:32353): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997230.048:32354): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997230.070:32355): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997230.095:32356): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997230.319:32357): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997230.812:32358): pid=318521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997230.814:32359): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318521 suid=74 rport=44780 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997230.814:32360): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318521 suid=74 rport=44780 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997230.890:32361): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997230.890:32362): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997230.920:32363): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997230.920:32364): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318521 suid=74 rport=44780 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997230.922:32365): pid=318520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997230.922:32366): pid=318520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=208 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997230.922:32366): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde671a630 a2=1 a3=0 items=0 ppid=38931 pid=318520 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=208 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997230.922:32366): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997230.924:32367): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997230.957:32368): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997230.959:32369): pid=318523 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997230.960:32370): pid=318523 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997231.004:32371): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997231.004:32372): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.006:32373): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997231.084:32374): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997231.084:32375): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997231.087:32376): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997231.093:32377): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997231.111:32378): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997231.111:32379): pid=318524 uid=0 auid=0 ses=208 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.114:32380): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318523 suid=0 rport=44780 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.114:32381): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318523 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997231.117:32382): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997231.118:32383): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997231.119:32384): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997231.119:32385): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.119:32386): pid=318520 uid=0 auid=0 ses=208 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.146:32387): pid=318540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997231.147:32388): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318540 suid=74 rport=44788 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997231.148:32389): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318540 suid=74 rport=44788 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997231.268:32390): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997231.268:32391): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997231.297:32392): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997231.298:32393): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318540 suid=74 rport=44788 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997231.300:32394): pid=318539 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997231.300:32395): pid=318539 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=209 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997231.300:32395): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc141b2ef0 a2=1 a3=0 items=0 ppid=38931 pid=318539 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=209 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997231.300:32395): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997231.302:32396): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997231.342:32397): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.344:32398): pid=318545 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997231.345:32399): pid=318545 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997231.388:32400): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997231.388:32401): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.390:32402): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997231.456:32403): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997231.457:32404): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997231.458:32405): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997231.462:32406): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997231.621:32407): prog-id=1514 op=LOAD
type=SYSCALL msg=audit(1773997231.621:32407): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5e05ebd0 a2=90 a3=9500000000 items=0 ppid=318575 pid=318576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997231.621:32407): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F356462663735386261663132346130663164333164646631363639636163
type=SERVICE_START msg=audit(1773997231.697:32408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997231.711:32409): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997231.713:32410): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997231.714:32411): pid=318547 uid=0 auid=0 ses=209 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.717:32412): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318545 suid=0 rport=44788 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.718:32413): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318545 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997231.722:32414): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997231.722:32415): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997231.723:32416): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997231.723:32417): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997231.723:32418): pid=318539 uid=0 auid=0 ses=209 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318539 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997231.858:32419): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997231.886:32420): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997231.998:32421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997232.063:32422): pid=318640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997232.076:32423): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=318640 suid=74 rport=48550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997232.076:32424): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=318640 suid=74 rport=48550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997232.309:32425): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997233.447:32426): pid=318644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997233.449:32427): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318644 suid=74 rport=44794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997233.449:32428): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318644 suid=74 rport=44794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997233.528:32429): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997233.528:32430): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997233.550:32431): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997233.551:32432): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318644 suid=74 rport=44794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997233.553:32433): pid=318643 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997233.553:32434): pid=318643 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=210 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997233.553:32434): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdda0be360 a2=1 a3=0 items=0 ppid=38931 pid=318643 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=210 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997233.553:32434): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997233.554:32435): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997233.591:32436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997233.600:32437): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.602:32438): pid=318647 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997233.604:32439): pid=318647 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997233.649:32440): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997233.649:32441): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.652:32442): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997233.731:32443): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997233.731:32444): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997233.733:32445): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997233.737:32446): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997233.755:32447): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997233.756:32448): pid=318658 uid=0 auid=0 ses=210 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.760:32449): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318647 suid=0 rport=44794 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.760:32450): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318647 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997233.762:32451): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997233.763:32452): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997233.763:32453): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997233.764:32454): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997233.765:32455): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.765:32456): pid=318643 uid=0 auid=0 ses=210 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318643 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.785:32457): pid=318691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997233.786:32458): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318691 suid=74 rport=44800 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997233.787:32459): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318691 suid=74 rport=44800 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997233.876:32460): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997233.876:32461): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997233.906:32462): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997233.906:32463): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318691 suid=74 rport=44800 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997233.908:32464): pid=318690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997233.909:32465): pid=318690 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=211 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997233.909:32465): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6643e530 a2=1 a3=0 items=0 ppid=38931 pid=318690 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=211 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997233.909:32465): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997233.911:32466): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997233.953:32467): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997233.955:32468): pid=318693 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997233.957:32469): pid=318693 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997234.000:32470): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997234.000:32471): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997234.002:32472): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318694 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997234.070:32473): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997234.070:32474): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997234.072:32475): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997234.076:32476): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997234.258:32477): prog-id=1515 op=LOAD
type=SYSCALL msg=audit(1773997234.258:32477): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff5375de90 a2=90 a3=9500000000 items=0 ppid=318722 pid=318723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997234.258:32477): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F646466336139613262663932363562353864323361646136373339313035
type=SERVICE_START msg=audit(1773997234.339:32478): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997234.355:32479): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318640 suid=74 rport=48550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997234.355:32480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_manila_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997234.356:32481): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997234.357:32482): pid=318694 uid=0 auid=0 ses=211 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997234.357:32483): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318640 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997234.358:32484): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997234.358:32485): pid=318639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997234.360:32486): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318693 suid=0 rport=44800 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997234.361:32487): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318693 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997234.364:32488): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997234.365:32489): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997234.365:32490): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997234.365:32491): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997234.366:32492): pid=318690 uid=0 auid=0 ses=211 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997234.487:32493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997236.274:32494): pid=318752 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318752 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997236.276:32495): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318752 suid=74 rport=44806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997236.276:32496): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318752 suid=74 rport=44806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997236.348:32497): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997236.348:32498): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997236.366:32499): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997236.366:32500): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318752 suid=74 rport=44806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997236.368:32501): pid=318751 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997236.368:32502): pid=318751 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=212 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997236.368:32502): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd1aeee50 a2=1 a3=0 items=0 ppid=38931 pid=318751 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=212 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997236.368:32502): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997236.369:32503): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997236.381:32504): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997236.394:32505): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.395:32506): pid=318760 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997236.397:32507): pid=318760 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997236.440:32508): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997236.440:32509): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.442:32510): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997236.569:32511): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997236.569:32512): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997236.571:32513): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997236.585:32514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997236.586:32515): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997236.602:32516): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997236.602:32517): pid=318766 uid=0 auid=0 ses=212 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997236.604:32518): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997236.605:32519): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.605:32520): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318760 suid=0 rport=44806 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.605:32521): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318760 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997236.608:32522): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997236.608:32523): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.609:32524): pid=318751 uid=0 auid=0 ses=212 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318751 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997236.630:32525): pid=318806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997236.631:32526): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318806 suid=74 rport=44808 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997236.632:32527): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318806 suid=74 rport=44808 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997236.946:32528): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997236.947:32529): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997236.964:32530): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997236.964:32531): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318806 suid=74 rport=44808 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997236.968:32532): pid=318804 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997236.969:32533): pid=318804 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=213 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997236.969:32533): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6a83ecd0 a2=1 a3=0 items=0 ppid=38931 pid=318804 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=213 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997236.969:32533): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997236.970:32534): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997236.999:32535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997237.003:32536): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997237.004:32537): pid=318827 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997237.006:32538): pid=318827 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997237.049:32539): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997237.049:32540): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997237.051:32541): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318828 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997237.101:32542): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997237.102:32543): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997237.102:32544): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997237.107:32545): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997237.234:32546): prog-id=1516 op=LOAD
type=SYSCALL msg=audit(1773997237.234:32546): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffcc8db190 a2=90 a3=9500000000 items=0 ppid=318858 pid=318859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997237.234:32546): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F636461306664346134333865623538383661643837333331623635313361
type=SERVICE_START msg=audit(1773997237.307:32547): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997237.321:32548): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_neutron_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997237.323:32549): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997237.323:32550): pid=318828 uid=0 auid=0 ses=213 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997237.327:32551): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318827 suid=0 rport=44808 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997237.327:32552): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318827 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997237.330:32553): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997237.330:32554): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997237.330:32555): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997237.330:32556): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997237.330:32557): pid=318804 uid=0 auid=0 ses=213 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997237.615:32558): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997238.164:32559): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997238.768:32560): pid=318953 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997238.782:32561): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=318953 suid=74 rport=50028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997238.782:32562): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=318953 suid=74 rport=50028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997238.866:32563): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="basit" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997239.011:32564): pid=318955 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318955 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997239.012:32565): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318955 suid=74 rport=52572 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997239.013:32566): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318955 suid=74 rport=52572 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997239.116:32567): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997239.116:32568): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997239.148:32569): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997239.148:32570): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318955 suid=74 rport=52572 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997239.150:32571): pid=318954 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997239.150:32572): pid=318954 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=214 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997239.150:32572): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffee5b28cd0 a2=1 a3=0 items=0 ppid=38931 pid=318954 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=214 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997239.150:32572): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997239.151:32573): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997239.174:32574): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.175:32575): pid=318957 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997239.176:32576): pid=318957 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997239.220:32577): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997239.220:32578): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.223:32579): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318958 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997239.295:32580): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997239.295:32581): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997239.296:32582): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997239.301:32583): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997239.314:32584): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997239.315:32585): pid=318958 uid=0 auid=0 ses=214 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.317:32586): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318957 suid=0 rport=52572 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.317:32587): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318957 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997239.320:32588): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997239.320:32589): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997239.320:32590): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997239.320:32591): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.321:32592): pid=318954 uid=0 auid=0 ses=214 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318954 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.344:32593): pid=318974 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318974 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997239.345:32594): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318974 suid=74 rport=52584 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997239.345:32595): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=318974 suid=74 rport=52584 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997239.422:32596): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997239.422:32597): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997239.451:32598): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997239.453:32599): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318974 suid=74 rport=52584 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997239.455:32600): pid=318973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997239.455:32601): pid=318973 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=215 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997239.455:32601): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9ccce090 a2=1 a3=0 items=0 ppid=38931 pid=318973 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=215 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997239.455:32601): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997239.456:32602): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997239.488:32603): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.489:32604): pid=318977 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997239.490:32605): pid=318977 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997239.532:32606): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997239.532:32607): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.533:32608): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318978 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997239.593:32609): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997239.593:32610): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997239.594:32611): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997239.597:32612): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997239.780:32613): prog-id=1517 op=LOAD
type=SYSCALL msg=audit(1773997239.780:32613): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc7ecda330 a2=90 a3=9500000000 items=0 ppid=319008 pid=319009 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997239.780:32613): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623234626462346461623763633832323034333935626565333831353131
type=SERVICE_START msg=audit(1773997239.830:32614): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997239.842:32615): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_placement_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997239.846:32616): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997239.846:32617): pid=318978 uid=0 auid=0 ses=215 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.850:32618): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318977 suid=0 rport=52584 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.850:32619): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997239.852:32620): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997239.852:32621): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997239.852:32622): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997239.852:32623): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997239.852:32624): pid=318973 uid=0 auid=0 ses=215 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997239.963:32625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.066:32626): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=318953 suid=74 rport=50028 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997241.066:32627): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318953 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997241.067:32628): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=318952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997241.067:32629): pid=318952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.448:32630): pid=319057 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319057 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997241.449:32631): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319057 suid=74 rport=52594 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997241.449:32632): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319057 suid=74 rport=52594 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997241.564:32633): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.564:32634): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997241.586:32635): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.586:32636): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319057 suid=74 rport=52594 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997241.588:32637): pid=319056 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997241.588:32638): pid=319056 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=216 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997241.588:32638): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc634d880 a2=1 a3=0 items=0 ppid=38931 pid=319056 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=216 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997241.588:32638): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997241.590:32639): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997241.623:32640): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.625:32641): pid=319059 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997241.626:32642): pid=319059 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997241.670:32643): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997241.670:32644): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.672:32645): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319060 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997241.741:32646): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997241.741:32647): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997241.743:32648): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997241.747:32649): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997241.763:32650): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997241.763:32651): pid=319060 uid=0 auid=0 ses=216 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.766:32652): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319059 suid=0 rport=52594 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.766:32653): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997241.769:32654): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997241.770:32655): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997241.771:32656): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997241.771:32657): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.771:32658): pid=319056 uid=0 auid=0 ses=216 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319056 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.800:32659): pid=319076 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997241.802:32660): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319076 suid=74 rport=52606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997241.802:32661): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319076 suid=74 rport=52606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997241.884:32662): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.884:32663): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997241.913:32664): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997241.913:32665): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319076 suid=74 rport=52606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997241.915:32666): pid=319075 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997241.915:32667): pid=319075 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=217 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997241.915:32667): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff568972d0 a2=1 a3=0 items=0 ppid=38931 pid=319075 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=217 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997241.915:32667): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997241.917:32668): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997241.943:32669): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.945:32670): pid=319078 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997241.946:32671): pid=319078 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997241.989:32672): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997241.989:32673): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997241.990:32674): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319079 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997242.041:32675): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997242.041:32676): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997242.042:32677): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997242.044:32678): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997242.192:32679): prog-id=1518 op=LOAD
type=SYSCALL msg=audit(1773997242.192:32679): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd84af02e0 a2=90 a3=9500000000 items=0 ppid=319108 pid=319109 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997242.192:32679): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663666613265666562356135393261373766336632303835633262343365
type=SERVICE_START msg=audit(1773997242.264:32680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997242.272:32681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api_cron comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997242.276:32682): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997242.276:32683): pid=319079 uid=0 auid=0 ses=217 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997242.280:32684): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319078 suid=0 rport=52606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997242.280:32685): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319078 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997242.282:32686): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997242.283:32687): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997242.283:32688): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997242.283:32689): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997242.284:32690): pid=319075 uid=0 auid=0 ses=217 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997242.407:32691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997243.946:32692): pid=319136 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997243.948:32693): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319136 suid=74 rport=52616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997243.948:32694): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319136 suid=74 rport=52616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997244.029:32695): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997244.029:32696): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997244.056:32697): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997244.056:32698): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319136 suid=74 rport=52616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997244.059:32699): pid=319135 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997244.059:32700): pid=319135 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=218 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997244.059:32700): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe9a7a36a0 a2=1 a3=0 items=0 ppid=38931 pid=319135 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=218 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997244.059:32700): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997244.060:32701): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997244.083:32702): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.084:32703): pid=319138 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997244.086:32704): pid=319138 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997244.129:32705): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997244.129:32706): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.131:32707): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997244.196:32708): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997244.196:32709): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997244.198:32710): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997244.201:32711): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997244.216:32712): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997244.216:32713): pid=319139 uid=0 auid=0 ses=218 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.219:32714): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319138 suid=0 rport=52616 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.219:32715): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319138 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997244.222:32716): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997244.222:32717): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997244.222:32718): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997244.222:32719): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.223:32720): pid=319135 uid=0 auid=0 ses=218 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.244:32721): pid=319155 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319155 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997244.245:32722): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319155 suid=74 rport=52618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997244.245:32723): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319155 suid=74 rport=52618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997244.320:32724): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997244.320:32725): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997244.350:32726): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997244.351:32727): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319155 suid=74 rport=52618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997244.353:32728): pid=319154 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997244.353:32729): pid=319154 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=219 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997244.353:32729): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefccff3d0 a2=1 a3=0 items=0 ppid=38931 pid=319154 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=219 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997244.353:32729): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997244.354:32730): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997244.377:32731): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997244.391:32732): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.392:32733): pid=319163 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997244.394:32734): pid=319163 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997244.436:32735): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997244.436:32736): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.438:32737): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319170 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997244.492:32738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997244.509:32739): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997244.510:32740): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997244.510:32741): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997244.514:32742): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997244.649:32743): prog-id=1519 op=LOAD
type=SYSCALL msg=audit(1773997244.649:32743): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffed7b92ac0 a2=90 a3=9500000000 items=0 ppid=319207 pid=319208 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997244.649:32743): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663830376135646237333761393361366337313061363437656137626139
type=SERVICE_START msg=audit(1773997244.713:32744): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997244.728:32745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_api comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997244.731:32746): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997244.731:32747): pid=319170 uid=0 auid=0 ses=219 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.734:32748): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319163 suid=0 rport=52618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.735:32749): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319163 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997244.737:32750): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997244.738:32751): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997244.739:32752): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997244.739:32753): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997244.739:32754): pid=319154 uid=0 auid=0 ses=219 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319154 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997245.396:32755): pid=319256 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319256 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997245.407:32756): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=319256 suid=74 rport=50040 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997245.408:32757): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=319256 suid=74 rport=50040 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997245.621:32758): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="admin" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997246.712:32759): pid=319260 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319260 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997246.713:32760): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319260 suid=74 rport=52632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997246.713:32761): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319260 suid=74 rport=52632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997246.791:32762): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997246.791:32763): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997246.814:32764): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997246.814:32765): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319260 suid=74 rport=52632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997246.816:32766): pid=319259 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997246.816:32767): pid=319259 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=220 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997246.816:32767): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc2391cb80 a2=1 a3=0 items=0 ppid=38931 pid=319259 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=220 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997246.816:32767): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997246.818:32768): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997246.835:32769): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997246.852:32770): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997246.853:32771): pid=319269 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319269 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997246.855:32772): pid=319269 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997246.898:32773): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997246.898:32774): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997246.900:32775): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997246.956:32776): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997246.973:32777): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997246.974:32778): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997246.975:32779): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997246.979:32780): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997246.991:32781): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997246.992:32782): pid=319276 uid=0 auid=0 ses=220 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997246.994:32783): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319269 suid=0 rport=52632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997246.994:32784): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319269 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997246.997:32785): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997246.997:32786): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997246.998:32787): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997246.998:32788): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997246.998:32789): pid=319259 uid=0 auid=0 ses=220 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319259 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.020:32790): pid=319299 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319299 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997247.021:32791): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319299 suid=74 rport=52642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997247.021:32792): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319299 suid=74 rport=52642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997247.113:32793): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997247.113:32794): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997247.136:32795): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997247.136:32796): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319299 suid=74 rport=52642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997247.139:32797): pid=319298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997247.139:32798): pid=319298 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=221 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997247.139:32798): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffbc3a0630 a2=1 a3=0 items=0 ppid=38931 pid=319298 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=221 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997247.139:32798): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997247.140:32799): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997247.168:32800): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.170:32801): pid=319301 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997247.171:32802): pid=319301 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997247.214:32803): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997247.214:32804): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.216:32805): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319302 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997247.269:32806): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997247.269:32807): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997247.270:32808): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997247.273:32809): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997247.432:32810): prog-id=1520 op=LOAD
type=SYSCALL msg=audit(1773997247.432:32810): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdb78a0360 a2=90 a3=9500000000 items=0 ppid=319330 pid=319331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997247.432:32810): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616239333737346331376262633937396436303936366331643039326562
type=SERVICE_START msg=audit(1773997247.506:32811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997247.518:32812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997247.520:32813): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997247.520:32814): pid=319302 uid=0 auid=0 ses=221 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.523:32815): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319301 suid=0 rport=52642 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.524:32816): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997247.527:32817): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997247.527:32818): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997247.528:32819): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997247.528:32820): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997247.528:32821): pid=319298 uid=0 auid=0 ses=221 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997247.661:32822): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997249.214:32823): pid=319360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997249.215:32824): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319360 suid=74 rport=52586 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997249.216:32825): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319360 suid=74 rport=52586 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997249.294:32826): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997249.294:32827): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997249.323:32828): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997249.323:32829): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319360 suid=74 rport=52586 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997249.325:32830): pid=319359 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997249.325:32831): pid=319359 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=222 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997249.325:32831): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0ee2b060 a2=1 a3=0 items=0 ppid=38931 pid=319359 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=222 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997249.325:32831): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997249.326:32832): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997249.353:32833): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.354:32834): pid=319362 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997249.355:32835): pid=319362 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997249.398:32836): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997249.398:32837): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.401:32838): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319363 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997249.465:32839): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997249.465:32840): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997249.466:32841): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997249.470:32842): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997249.485:32843): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997249.485:32844): pid=319363 uid=0 auid=0 ses=222 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.487:32845): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319362 suid=0 rport=52586 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.488:32846): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319362 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997249.490:32847): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997249.491:32848): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997249.492:32849): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997249.493:32850): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.493:32851): pid=319359 uid=0 auid=0 ses=222 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.522:32852): pid=319379 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997249.523:32853): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319379 suid=74 rport=52598 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997249.523:32854): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319379 suid=74 rport=52598 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997249.599:32855): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997249.599:32856): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997249.617:32857): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997249.617:32858): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319379 suid=74 rport=52598 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997249.620:32859): pid=319378 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997249.620:32860): pid=319378 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=223 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997249.620:32860): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff95e13550 a2=1 a3=0 items=0 ppid=38931 pid=319378 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=223 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997249.620:32860): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997249.621:32861): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997249.660:32862): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.661:32863): pid=319381 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997249.662:32864): pid=319381 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997249.704:32865): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997249.704:32866): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.705:32867): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319382 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997249.760:32868): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997249.760:32869): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997249.761:32870): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997249.765:32871): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997249.858:32872): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319256 suid=74 rport=50040 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997249.858:32873): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319256 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997249.860:32874): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319255 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997249.860:32875): pid=319255 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="admin" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997249.927:32876): prog-id=1521 op=LOAD
type=SYSCALL msg=audit(1773997249.927:32876): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd7ee9a100 a2=90 a3=9500000000 items=0 ppid=319411 pid=319412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997249.927:32876): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F653530396630356633313833393135313939373030353230356636613261
type=SERVICE_START msg=audit(1773997249.992:32877): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997250.003:32878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_metadata comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997250.005:32879): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997250.006:32880): pid=319382 uid=0 auid=0 ses=223 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997250.009:32881): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319381 suid=0 rport=52598 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997250.009:32882): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319381 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997250.012:32883): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997250.012:32884): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997250.013:32885): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997250.013:32886): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997250.013:32887): pid=319378 uid=0 auid=0 ses=223 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997250.159:32888): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997251.634:32889): pid=319453 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319453 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997251.635:32890): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319453 suid=74 rport=52608 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997251.635:32891): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319453 suid=74 rport=52608 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997251.719:32892): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997251.719:32893): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997251.742:32894): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997251.743:32895): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319453 suid=74 rport=52608 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997251.746:32896): pid=319452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997251.746:32897): pid=319452 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=224 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997251.746:32897): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffd6600cc0 a2=1 a3=0 items=0 ppid=38931 pid=319452 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=224 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997251.746:32897): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997251.747:32898): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997251.770:32899): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.772:32900): pid=319455 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997251.774:32901): pid=319455 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997251.816:32902): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997251.816:32903): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.819:32904): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319456 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997251.858:32905): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997251.858:32906): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997251.859:32907): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997251.874:32908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997251.875:32909): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997251.876:32910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997251.888:32911): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997251.888:32912): pid=319456 uid=0 auid=0 ses=224 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.891:32913): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319455 suid=0 rport=52608 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.892:32914): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997251.895:32915): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997251.895:32916): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997251.895:32917): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997251.895:32918): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.895:32919): pid=319452 uid=0 auid=0 ses=224 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997251.922:32920): pid=319492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319492 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997251.923:32921): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319492 suid=74 rport=52620 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997251.924:32922): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319492 suid=74 rport=52620 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997251.969:32923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997251.999:32924): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997252.000:32925): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997252.030:32926): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997252.030:32927): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319492 suid=74 rport=52620 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997252.032:32928): pid=319487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997252.032:32929): pid=319487 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=225 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997252.032:32929): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff641a4ae0 a2=1 a3=0 items=0 ppid=38931 pid=319487 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=225 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997252.032:32929): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997252.034:32930): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997252.062:32931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997252.066:32932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997252.072:32933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997252.084:32934): pid=319540 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319540 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_START msg=audit(1773997252.090:32935): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997252.091:32936): pid=319547 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997252.092:32937): pid=319547 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_SESSION msg=audit(1773997252.096:32938): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=319540 suid=74 rport=34926 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997252.096:32939): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=319540 suid=74 rport=34926 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_LOGIN msg=audit(1773997252.135:32940): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997252.135:32941): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997252.136:32942): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319559 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997252.177:32943): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997252.177:32944): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=USER_AUTH msg=audit(1773997252.178:32945): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="nexus" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1773997252.178:32946): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997252.180:32947): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997252.209:32948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997252.247:32949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997252.299:32950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997252.334:32951): prog-id=1522 op=LOAD
type=SYSCALL msg=audit(1773997252.334:32951): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffad90b7a0 a2=90 a3=9500000000 items=0 ppid=319624 pid=319625 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997252.334:32951): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997252.387:32952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997252.401:32953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997252.403:32954): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997252.404:32955): pid=319559 uid=0 auid=0 ses=225 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997252.407:32956): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319547 suid=0 rport=52620 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997252.407:32957): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319547 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997252.410:32958): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997252.410:32959): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997252.410:32960): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997252.410:32961): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997252.410:32962): pid=319487 uid=0 auid=0 ses=225 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319487 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997252.528:32963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997254.057:32964): pid=319654 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319654 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997254.059:32965): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319654 suid=74 rport=52628 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997254.059:32966): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319654 suid=74 rport=52628 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997254.137:32967): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997254.137:32968): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997254.166:32969): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997254.166:32970): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319654 suid=74 rport=52628 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997254.169:32971): pid=319653 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997254.169:32972): pid=319653 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=226 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997254.169:32972): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc30f7ce20 a2=1 a3=0 items=0 ppid=38931 pid=319653 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=226 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997254.169:32972): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997254.170:32973): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997254.197:32974): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.199:32975): pid=319656 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997254.200:32976): pid=319656 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997254.244:32977): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997254.244:32978): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.246:32979): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997254.312:32980): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997254.312:32981): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997254.313:32982): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997254.317:32983): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997254.328:32984): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997254.328:32985): pid=319657 uid=0 auid=0 ses=226 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.331:32986): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319656 suid=0 rport=52628 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.332:32987): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997254.334:32988): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997254.335:32989): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997254.335:32990): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997254.336:32991): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.336:32992): pid=319653 uid=0 auid=0 ses=226 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319653 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.351:32993): pid=319673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997254.353:32994): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319673 suid=74 rport=52640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997254.353:32995): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319673 suid=74 rport=52640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997254.429:32996): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997254.429:32997): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997254.458:32998): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997254.458:32999): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319673 suid=74 rport=52640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997254.460:33000): pid=319672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997254.460:33001): pid=319672 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=227 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997254.460:33001): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdbfab97d0 a2=1 a3=0 items=0 ppid=38931 pid=319672 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=227 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997254.460:33001): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997254.462:33002): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997254.488:33003): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.489:33004): pid=319675 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997254.490:33005): pid=319675 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997254.533:33006): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997254.533:33007): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.535:33008): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997254.593:33009): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997254.593:33010): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997254.594:33011): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997254.597:33012): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997254.758:33013): prog-id=1523 op=LOAD
type=SYSCALL msg=audit(1773997254.758:33013): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc64b22920 a2=90 a3=9500000000 items=0 ppid=319703 pid=319704 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997254.758:33013): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F393164336638313837313831366263316330343938356564626335633130
type=SERVICE_START msg=audit(1773997254.828:33014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997254.847:33015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_vnc_proxy comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997254.850:33016): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997254.850:33017): pid=319676 uid=0 auid=0 ses=227 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.854:33018): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319675 suid=0 rport=52640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.855:33019): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319675 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997254.860:33020): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997254.860:33021): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997254.861:33022): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997254.861:33023): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997254.861:33024): pid=319672 uid=0 auid=0 ses=227 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997254.880:33025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997255.237:33026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997255.717:33027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997255.913:33028): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319540 suid=74 rport=34926 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997255.914:33029): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319540 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997255.917:33030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997255.917:33031): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319524 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997255.917:33032): pid=319524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997255.920:33033): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997255.922:33034): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997255.999:33035): pid=319797 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319797 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997256.003:33036): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319797 suid=74 rport=52648 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997256.007:33037): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=319797 suid=74 rport=52648 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997256.010:33038): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997256.014:33039): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997256.032:33040): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997256.066:33041): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997256.086:33042): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997256.086:33043): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.105:33044): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997256.107:33045): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997256.108:33046): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319797 suid=74 rport=52648 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997256.109:33047): pid=319793 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997256.110:33048): pid=319793 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=228 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997256.110:33048): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe44e9dc60 a2=1 a3=0 items=0 ppid=38931 pid=319793 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=228 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997256.110:33048): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997256.111:33049): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997256.112:33050): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997256.129:33051): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.130:33052): pid=319882 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997256.131:33053): pid=319882 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997256.174:33054): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997256.174:33055): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.176:33056): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319904 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997256.218:33057): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997256.218:33058): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997256.219:33059): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997256.224:33060): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997256.234:33061): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997256.234:33062): pid=319904 uid=0 auid=0 ses=228 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.236:33063): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=319882 suid=0 rport=52648 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.237:33064): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319882 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997256.239:33065): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997256.239:33066): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997256.240:33067): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997256.240:33068): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.240:33069): pid=319793 uid=0 auid=0 ses=228 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=319793 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997256.252:33070): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.300:33071): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.306:33072): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.384:33073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.395:33074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.422:33075): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.619:33076): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997256.808:33077): pid=320001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997256.809:33078): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320001 suid=74 rport=52654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997256.809:33079): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320001 suid=74 rport=52654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997256.871:33080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997256.872:33081): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997256.872:33082): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997256.881:33083): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997256.881:33084): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997256.912:33085): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997256.913:33086): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320001 suid=74 rport=52654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997256.915:33087): pid=320000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997256.916:33088): pid=320000 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=229 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997256.916:33088): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff947cbb30 a2=1 a3=0 items=0 ppid=38931 pid=320000 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=229 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997256.916:33088): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997256.916:33089): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997256.975:33090): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997256.976:33091): pid=320035 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997256.977:33092): pid=320035 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997257.007:33093): prog-id=1524 op=LOAD
type=SYSCALL msg=audit(1773997257.007:33093): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffffd18bf60 a2=90 a3=9500000000 items=0 ppid=320037 pid=320038 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997257.007:33093): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_LOGIN msg=audit(1773997257.020:33094): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997257.020:33095): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.023:33096): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320040 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997257.061:33097): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997257.076:33098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997257.076:33099): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997257.076:33100): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997257.077:33101): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997257.081:33102): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997257.092:33103): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997257.093:33104): pid=320040 uid=0 auid=0 ses=229 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.096:33105): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320035 suid=0 rport=52654 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.096:33106): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320035 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997257.098:33107): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997257.099:33108): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997257.099:33109): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997257.099:33110): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.099:33111): pid=320000 uid=0 auid=0 ses=229 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997257.169:33112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997257.191:33113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997257.620:33114): pid=320086 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320086 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997257.622:33115): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320086 suid=74 rport=39446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997257.622:33116): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320086 suid=74 rport=39446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997257.703:33117): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997257.703:33118): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997257.724:33119): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997257.724:33120): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320086 suid=74 rport=39446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997257.727:33121): pid=320085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997257.727:33122): pid=320085 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=230 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997257.727:33122): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd3ae42360 a2=1 a3=0 items=0 ppid=38931 pid=320085 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=230 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997257.727:33122): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997257.728:33123): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997257.759:33124): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.760:33125): pid=320088 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997257.761:33126): pid=320088 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997257.804:33127): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997257.805:33128): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.806:33129): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320089 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997257.877:33130): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997257.877:33131): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997257.880:33132): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997257.883:33133): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997257.900:33134): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997257.901:33135): pid=320089 uid=0 auid=0 ses=230 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.904:33136): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320088 suid=0 rport=39446 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.904:33137): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320088 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997257.907:33138): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997257.907:33139): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997257.907:33140): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997257.907:33141): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997257.907:33142): pid=320085 uid=0 auid=0 ses=230 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.522:33143): pid=320105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997258.523:33144): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320105 suid=74 rport=39452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997258.523:33145): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320105 suid=74 rport=39452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997258.606:33146): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997258.606:33147): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997258.635:33148): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997258.635:33149): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320105 suid=74 rport=39452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997258.638:33150): pid=320104 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997258.638:33151): pid=320104 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=231 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997258.638:33151): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffeb0a2550 a2=1 a3=0 items=0 ppid=38931 pid=320104 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=231 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997258.638:33151): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997258.640:33152): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997258.673:33153): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.674:33154): pid=320107 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997258.676:33155): pid=320107 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997258.719:33156): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997258.719:33157): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.721:33158): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320108 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.756:33159): pid=320122 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320122 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997258.768:33160): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=320122 suid=74 rport=51332 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997258.768:33161): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=320122 suid=74 rport=51332 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1773997258.788:33162): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997258.788:33163): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997258.791:33164): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997258.795:33165): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997258.811:33166): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997258.811:33167): pid=320108 uid=0 auid=0 ses=231 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.814:33168): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320107 suid=0 rport=39452 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.815:33169): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997258.817:33170): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997258.818:33171): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997258.819:33172): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997258.819:33173): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997258.819:33174): pid=320104 uid=0 auid=0 ses=231 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320104 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_AUTH msg=audit(1773997258.852:33175): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="newuser" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997259.056:33176): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997259.429:33177): pid=320126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997259.430:33178): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320126 suid=74 rport=39466 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997259.430:33179): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320126 suid=74 rport=39466 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997259.507:33180): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997259.507:33181): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997259.517:33182): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997259.518:33183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997259.523:33184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997259.537:33185): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997259.537:33186): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320126 suid=74 rport=39466 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997259.541:33187): pid=320125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997259.541:33188): pid=320125 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=232 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997259.541:33188): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0c5323c0 a2=1 a3=0 items=0 ppid=38931 pid=320125 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=232 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997259.541:33188): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997259.542:33189): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997259.576:33190): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997259.577:33191): pid=320160 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997259.579:33192): pid=320160 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997259.622:33193): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997259.622:33194): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997259.623:33195): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997259.676:33196): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997259.692:33197): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997259.692:33198): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997259.692:33199): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997259.694:33200): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997259.698:33201): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997259.703:33202): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997259.703:33203): pid=320169 uid=0 auid=0 ses=232 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997259.705:33204): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320160 suid=0 rport=39466 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997259.705:33205): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320160 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997259.706:33206): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997259.706:33207): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997259.707:33208): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997259.707:33209): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997259.707:33210): pid=320125 uid=0 auid=0 ses=232 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997259.724:33211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997259.859:33212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997259.859:33213): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997259.970:33214): prog-id=1525 op=LOAD
type=SYSCALL msg=audit(1773997259.970:33214): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc09813a20 a2=90 a3=9500000000 items=0 ppid=320223 pid=320224 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997259.970:33214): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997260.038:33215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.043:33216): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.053:33217): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.067:33218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.134:33219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.136:33220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.167:33221): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.244:33222): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.305:33223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.358:33224): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997260.375:33225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.419:33226): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997260.812:33227): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997260.876:33228): pid=320369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997260.878:33229): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320369 suid=74 rport=39480 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997260.879:33230): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320369 suid=74 rport=39480 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997260.967:33231): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997260.967:33232): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997260.996:33233): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997260.997:33234): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320369 suid=74 rport=39480 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997260.999:33235): pid=320368 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997260.999:33236): pid=320368 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=233 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997260.999:33236): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0dc1efc0 a2=1 a3=0 items=0 ppid=38931 pid=320368 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=233 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997260.999:33236): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997261.001:33237): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997261.033:33238): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.034:33239): pid=320371 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997261.035:33240): pid=320371 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997261.079:33241): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997261.079:33242): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.081:33243): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320372 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997261.143:33244): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997261.143:33245): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997261.146:33246): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997261.150:33247): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997261.163:33248): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997261.163:33249): pid=320372 uid=0 auid=0 ses=233 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.166:33250): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320371 suid=0 rport=39480 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.166:33251): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320371 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997261.167:33252): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997261.168:33253): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997261.168:33254): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997261.168:33255): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.168:33256): pid=320368 uid=0 auid=0 ses=233 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320368 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.186:33257): pid=320390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997261.187:33258): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320390 suid=74 rport=39494 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997261.187:33259): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320390 suid=74 rport=39494 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997261.260:33260): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997261.260:33261): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997261.278:33262): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997261.278:33263): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320390 suid=74 rport=39494 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997261.280:33264): pid=320387 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997261.280:33265): pid=320387 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=234 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997261.280:33265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcddc014b0 a2=1 a3=0 items=0 ppid=38931 pid=320387 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=234 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997261.280:33265): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997261.281:33266): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997261.303:33267): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.304:33268): pid=320423 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997261.305:33269): pid=320423 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997261.347:33270): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997261.347:33271): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.350:33272): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997261.398:33273): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997261.399:33274): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997261.399:33275): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997261.404:33276): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997261.528:33277): prog-id=1526 op=LOAD
type=SYSCALL msg=audit(1773997261.528:33277): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff88da9c10 a2=90 a3=9500000000 items=0 ppid=320483 pid=320484 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997261.528:33277): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303539383732616130316363373135636337386536363539653037396231
type=SERVICE_START msg=audit(1773997261.584:33278): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997261.592:33279): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_central comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997261.594:33280): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997261.594:33281): pid=320426 uid=0 auid=0 ses=234 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.598:33282): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320423 suid=0 rport=39494 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.598:33283): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320423 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997261.601:33284): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997261.601:33285): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997261.602:33286): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997261.602:33287): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997261.602:33288): pid=320387 uid=0 auid=0 ses=234 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320387 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997261.677:33289): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997262.063:33290): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997262.066:33291): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997262.068:33292): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997262.226:33293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997262.247:33294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997262.635:33295): pid=320629 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320629 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997262.636:33296): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320629 suid=74 rport=39502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997262.636:33297): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320629 suid=74 rport=39502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997262.711:33298): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997262.711:33299): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997262.734:33300): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997262.735:33301): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320629 suid=74 rport=39502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997262.737:33302): pid=320628 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997262.738:33303): pid=320628 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=235 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997262.738:33303): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce59bcb30 a2=1 a3=0 items=0 ppid=38931 pid=320628 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=235 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997262.738:33303): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997262.740:33304): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997262.777:33305): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997262.778:33306): pid=320632 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997262.779:33307): pid=320632 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997262.822:33308): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997262.822:33309): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997262.824:33310): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320635 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997262.872:33311): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997262.872:33312): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997262.873:33313): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997262.876:33314): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997262.886:33315): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997262.886:33316): pid=320635 uid=0 auid=0 ses=235 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997262.889:33317): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320632 suid=0 rport=39502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997262.889:33318): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320632 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997262.891:33319): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997262.892:33320): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997262.893:33321): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997262.893:33322): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997262.893:33323): pid=320628 uid=0 auid=0 ses=235 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320628 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.305:33324): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320122 suid=74 rport=51332 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997263.306:33325): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320122 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997263.307:33326): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320121 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997263.307:33327): pid=320121 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997263.474:33328): pid=320666 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320666 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997263.476:33329): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320666 suid=74 rport=39504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997263.477:33330): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320666 suid=74 rport=39504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997263.560:33331): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997263.560:33332): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997263.582:33333): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997263.582:33334): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320666 suid=74 rport=39504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997263.585:33335): pid=320665 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997263.585:33336): pid=320665 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=236 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997263.585:33336): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff274c6b60 a2=1 a3=0 items=0 ppid=38931 pid=320665 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=236 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997263.585:33336): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997263.587:33337): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997263.620:33338): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.622:33339): pid=320679 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997263.623:33340): pid=320679 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997263.630:33341): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997263.666:33342): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997263.666:33343): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.668:33344): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320682 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997263.729:33345): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997263.729:33346): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997263.731:33347): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997263.734:33348): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997263.734:33349): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997263.736:33350): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997263.759:33351): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997263.759:33352): pid=320682 uid=0 auid=0 ses=236 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.763:33353): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320679 suid=0 rport=39504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.763:33354): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320679 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997263.767:33355): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997263.767:33356): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997263.768:33357): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997263.768:33358): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997263.768:33359): pid=320665 uid=0 auid=0 ses=236 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320665 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997263.794:33360): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997263.892:33361): prog-id=1527 op=LOAD
type=SYSCALL msg=audit(1773997263.892:33361): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffa6ff5090 a2=90 a3=9500000000 items=0 ppid=320721 pid=320722 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997263.892:33361): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997263.951:33362): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997263.955:33363): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997263.960:33364): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997264.066:33365): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997264.623:33366): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997264.721:33367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997264.866:33368): pid=320787 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320787 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997264.868:33369): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320787 suid=74 rport=39512 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997264.868:33370): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320787 suid=74 rport=39512 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997264.958:33371): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997264.958:33372): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997264.987:33373): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997264.988:33374): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320787 suid=74 rport=39512 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997264.989:33375): pid=320786 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997264.989:33376): pid=320786 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=237 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997264.989:33376): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffca7cc430 a2=1 a3=0 items=0 ppid=38931 pid=320786 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=237 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997264.989:33376): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997264.991:33377): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997265.019:33378): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.020:33379): pid=320789 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997265.021:33380): pid=320789 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997265.063:33381): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997265.063:33382): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.065:33383): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320790 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997265.109:33384): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997265.110:33385): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997265.111:33386): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997265.116:33387): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997265.127:33388): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997265.127:33389): pid=320790 uid=0 auid=0 ses=237 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.129:33390): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320789 suid=0 rport=39512 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.129:33391): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320789 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997265.131:33392): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997265.131:33393): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997265.132:33394): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997265.132:33395): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.132:33396): pid=320786 uid=0 auid=0 ses=237 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.145:33397): pid=320806 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320806 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997265.146:33398): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320806 suid=74 rport=39518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997265.146:33399): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320806 suid=74 rport=39518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997265.217:33400): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997265.217:33401): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997265.238:33402): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997265.238:33403): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320806 suid=74 rport=39518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997265.240:33404): pid=320805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997265.240:33405): pid=320805 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=238 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997265.240:33405): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc33e84ed0 a2=1 a3=0 items=0 ppid=38931 pid=320805 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=238 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997265.240:33405): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997265.241:33406): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997265.266:33407): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.267:33408): pid=320808 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997265.268:33409): pid=320808 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997265.311:33410): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997265.311:33411): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.312:33412): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320809 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997265.351:33413): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997265.351:33414): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997265.352:33415): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997265.354:33416): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.493:33417): pid=320842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=BPF msg=audit(1773997265.495:33418): prog-id=1528 op=LOAD
type=SYSCALL msg=audit(1773997265.495:33418): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc49ce9b90 a2=90 a3=9500000000 items=0 ppid=320838 pid=320839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997265.495:33418): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F343266386530366332636133353166663237613032656334333264623634
type=CRYPTO_SESSION msg=audit(1773997265.506:33419): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=320842 suid=74 rport=51338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997265.506:33420): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=320842 suid=74 rport=51338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997265.566:33421): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997265.580:33422): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ceilometer_agent_notification comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997265.581:33423): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997265.582:33424): pid=320809 uid=0 auid=0 ses=238 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.585:33425): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320808 suid=0 rport=39518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.585:33426): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997265.588:33427): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997265.588:33428): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997265.589:33429): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997265.589:33430): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997265.589:33431): pid=320805 uid=0 auid=0 ses=238 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_AUTH msg=audit(1773997265.618:33432): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997265.716:33433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997266.032:33434): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997266.467:33435): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997266.693:33436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997266.860:33437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997266.860:33438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997266.980:33439): prog-id=1529 op=LOAD
type=SYSCALL msg=audit(1773997266.980:33439): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf00b2f00 a2=90 a3=9500000000 items=0 ppid=320916 pid=320917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997266.980:33439): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997267.020:33440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997267.059:33441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997267.073:33442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.176:33443): pid=320960 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320960 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997267.177:33444): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320960 suid=74 rport=50548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997267.177:33445): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320960 suid=74 rport=50548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997267.248:33446): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997267.253:33447): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.253:33448): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997267.274:33449): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.274:33450): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320960 suid=74 rport=50548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997267.276:33451): pid=320959 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997267.276:33452): pid=320959 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=239 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997267.276:33452): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd70e0de10 a2=1 a3=0 items=0 ppid=38931 pid=320959 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=239 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997267.276:33452): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997267.278:33453): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997267.308:33454): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.310:33455): pid=320971 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997267.311:33456): pid=320971 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997267.354:33457): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997267.354:33458): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.356:33459): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997267.402:33460): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997267.403:33461): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997267.404:33462): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997267.407:33463): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997267.420:33464): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997267.420:33465): pid=320972 uid=0 auid=0 ses=239 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.421:33466): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320842 suid=74 rport=51338 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997267.421:33467): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320842 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997267.422:33468): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320971 suid=0 rport=50548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.422:33469): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320841 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997267.422:33470): pid=320841 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.422:33471): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320971 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997267.425:33472): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997267.425:33473): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997267.426:33474): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997267.426:33475): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.427:33476): pid=320959 uid=0 auid=0 ses=239 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320959 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.448:33477): pid=320988 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320988 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997267.449:33478): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320988 suid=74 rport=50564 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997267.449:33479): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=320988 suid=74 rport=50564 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997267.523:33480): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997267.524:33481): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.524:33482): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997267.552:33483): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997267.552:33484): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320988 suid=74 rport=50564 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997267.555:33485): pid=320987 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997267.555:33486): pid=320987 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=240 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997267.555:33486): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff195330c0 a2=1 a3=0 items=0 ppid=38931 pid=320987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=240 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997267.555:33486): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997267.556:33487): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997267.584:33488): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.585:33489): pid=320990 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997267.587:33490): pid=320990 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997267.629:33491): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997267.629:33492): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.631:33493): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320991 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997267.684:33494): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997267.684:33495): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997267.685:33496): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997267.690:33497): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997267.702:33498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997267.836:33499): prog-id=1530 op=LOAD
type=SYSCALL msg=audit(1773997267.836:33499): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc515434b0 a2=90 a3=9500000000 items=0 ppid=321033 pid=321034 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997267.836:33499): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F663566626635343434376232616637393836326262663335633432646539
type=SERVICE_START msg=audit(1773997267.873:33500): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_north_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997267.876:33501): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997267.876:33502): pid=320991 uid=0 auid=0 ses=240 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.880:33503): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=320990 suid=0 rport=50564 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.880:33504): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320990 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997267.883:33505): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997267.883:33506): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997267.884:33507): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997267.884:33508): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997267.884:33509): pid=320987 uid=0 auid=0 ses=240 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=320987 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997268.071:33510): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997268.367:33511): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997268.564:33512): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997269.467:33513): pid=321196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997269.468:33514): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321196 suid=74 rport=50576 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997269.468:33515): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321196 suid=74 rport=50576 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997269.538:33516): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997269.538:33517): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997269.556:33518): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997269.557:33519): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321196 suid=74 rport=50576 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997269.558:33520): pid=321195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997269.558:33521): pid=321195 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=241 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997269.558:33521): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd52e504b0 a2=1 a3=0 items=0 ppid=38931 pid=321195 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=241 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997269.558:33521): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997269.559:33522): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997269.599:33523): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.601:33524): pid=321198 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997269.603:33525): pid=321198 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997269.645:33526): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997269.645:33527): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.647:33528): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997269.710:33529): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997269.710:33530): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997269.711:33531): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997269.714:33532): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997269.729:33533): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997269.729:33534): pid=321199 uid=0 auid=0 ses=241 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.732:33535): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321198 suid=0 rport=50576 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.733:33536): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997269.735:33537): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997269.736:33538): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997269.736:33539): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997269.736:33540): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.737:33541): pid=321195 uid=0 auid=0 ses=241 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.760:33542): pid=321215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997269.761:33543): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321215 suid=74 rport=50588 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997269.762:33544): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321215 suid=74 rport=50588 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997269.841:33545): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997269.841:33546): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997269.861:33547): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997269.861:33548): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321215 suid=74 rport=50588 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997269.863:33549): pid=321214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997269.863:33550): pid=321214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=242 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997269.863:33550): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdd00aba10 a2=1 a3=0 items=0 ppid=38931 pid=321214 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=242 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997269.863:33550): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997269.865:33551): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997269.895:33552): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.896:33553): pid=321217 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997269.898:33554): pid=321217 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997269.942:33555): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997269.942:33556): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997269.943:33557): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997269.999:33558): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997269.999:33559): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997270.000:33560): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997270.004:33561): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997270.019:33562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997270.167:33563): prog-id=1531 op=LOAD
type=SYSCALL msg=audit(1773997270.167:33563): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd4d66b800 a2=90 a3=9500000000 items=0 ppid=321259 pid=321260 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997270.167:33563): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F623465366438656430333963363236303534313331356465313031313233
type=SERVICE_START msg=audit(1773997270.250:33564): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_south_db_server comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997270.256:33565): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997270.256:33566): pid=321218 uid=0 auid=0 ses=242 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997270.259:33567): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321217 suid=0 rport=50588 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997270.259:33568): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997270.262:33569): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997270.263:33570): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997270.263:33571): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997270.263:33572): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997270.263:33573): pid=321214 uid=0 auid=0 ses=242 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997271.029:33574): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997271.360:33575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997271.360:33576): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997271.500:33577): prog-id=1532 op=LOAD
type=SYSCALL msg=audit(1773997271.500:33577): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdab59cef0 a2=90 a3=9500000000 items=0 ppid=321428 pid=321429 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997271.500:33577): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997271.561:33578): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997271.575:33579): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997271.719:33580): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997271.919:33581): pid=321459 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997271.920:33582): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321459 suid=74 rport=50604 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997271.921:33583): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321459 suid=74 rport=50604 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997272.004:33584): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997272.004:33585): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997272.035:33586): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997272.035:33587): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321459 suid=74 rport=50604 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997272.037:33588): pid=321458 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997272.037:33589): pid=321458 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=243 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997272.037:33589): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4bc24370 a2=1 a3=0 items=0 ppid=38931 pid=321458 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=243 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997272.037:33589): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997272.039:33590): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997272.062:33591): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.063:33592): pid=321461 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997272.065:33593): pid=321461 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997272.108:33594): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997272.108:33595): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.114:33596): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321462 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997272.175:33597): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997272.175:33598): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997272.176:33599): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997272.180:33600): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997272.196:33601): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997272.196:33602): pid=321462 uid=0 auid=0 ses=243 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.199:33603): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321461 suid=0 rport=50604 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.199:33604): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321461 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997272.202:33605): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997272.202:33606): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997272.203:33607): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997272.203:33608): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.203:33609): pid=321458 uid=0 auid=0 ses=243 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.228:33610): pid=321478 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321478 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997272.229:33611): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321478 suid=74 rport=50618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997272.229:33612): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321478 suid=74 rport=50618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997272.320:33613): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997272.320:33614): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997272.348:33615): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997272.349:33616): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321478 suid=74 rport=50618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997272.351:33617): pid=321477 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997272.351:33618): pid=321477 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=244 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997272.351:33618): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea85dce10 a2=1 a3=0 items=0 ppid=38931 pid=321477 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=244 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997272.351:33618): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997272.353:33619): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997272.380:33620): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.381:33621): pid=321480 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997272.383:33622): pid=321480 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997272.427:33623): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997272.427:33624): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.429:33625): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997272.495:33626): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997272.496:33627): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C20737461727420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997272.497:33628): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997272.508:33629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997272.508:33630): pid=321497 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321497 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_START msg=audit(1773997272.512:33631): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_SESSION msg=audit(1773997272.524:33632): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=321497 suid=74 rport=39234 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997272.525:33633): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=321497 suid=74 rport=39234 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997272.616:33634): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997272.644:33635): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997272.695:33636): prog-id=1533 op=LOAD
type=SYSCALL msg=audit(1773997272.695:33636): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffff2c30730 a2=90 a3=9500000000 items=0 ppid=321528 pid=321529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997272.695:33636): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F316461636137616663303530353335656561626238396331643966623234
type=SERVICE_START msg=audit(1773997272.748:33637): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997272.761:33638): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_ovn_cluster_northd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997272.762:33639): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997272.763:33640): pid=321481 uid=0 auid=0 ses=244 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.766:33641): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321480 suid=0 rport=50618 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.766:33642): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997272.769:33643): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997272.769:33644): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997272.770:33645): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997272.770:33646): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997272.770:33647): pid=321477 uid=0 auid=0 ses=244 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321477 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997272.880:33648): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997273.520:33649): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997273.956:33650): pid=321598 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321598 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997273.957:33651): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321598 suid=74 rport=50632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997273.957:33652): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321598 suid=74 rport=50632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1773997273.968:33653): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1773997274.054:33654): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.054:33655): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997274.072:33656): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.072:33657): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321598 suid=74 rport=50632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997274.074:33658): pid=321597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997274.074:33659): pid=321597 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=245 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997274.074:33659): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefa50f270 a2=1 a3=0 items=0 ppid=38931 pid=321597 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=245 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997274.074:33659): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997274.076:33660): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997274.115:33661): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.116:33662): pid=321617 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997274.118:33663): pid=321617 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997274.161:33664): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997274.161:33665): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.164:33666): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997274.201:33667): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997274.231:33668): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997274.232:33669): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997274.233:33670): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997274.238:33671): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997274.254:33672): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997274.255:33673): pid=321630 uid=0 auid=0 ses=245 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.258:33674): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321617 suid=0 rport=50632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.259:33675): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321617 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997274.262:33676): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997274.262:33677): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997274.263:33678): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997274.263:33679): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.263:33680): pid=321597 uid=0 auid=0 ses=245 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997274.361:33681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997274.361:33682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.438:33683): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321497 suid=74 rport=39234 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997274.438:33684): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321497 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997274.439:33685): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321495 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997274.439:33686): pid=321495 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997274.490:33687): prog-id=1534 op=LOAD
type=SYSCALL msg=audit(1773997274.490:33687): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffccfd42b0 a2=90 a3=9500000000 items=0 ppid=321718 pid=321719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997274.490:33687): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997274.523:33688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997274.569:33689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997274.585:33690): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997274.632:33691): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997274.689:33692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.842:33693): pid=321764 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321764 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997274.844:33694): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321764 suid=74 rport=50640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997274.844:33695): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321764 suid=74 rport=50640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997274.933:33696): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.933:33697): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997274.962:33698): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997274.962:33699): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321764 suid=74 rport=50640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997274.964:33700): pid=321763 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997274.965:33701): pid=321763 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=246 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997274.965:33701): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec85ee0f0 a2=1 a3=0 items=0 ppid=38931 pid=321763 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=246 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997274.965:33701): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997274.966:33702): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997274.991:33703): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997274.992:33704): pid=321766 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997274.993:33705): pid=321766 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997275.037:33706): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997275.037:33707): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.040:33708): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997275.102:33709): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997275.102:33710): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997275.104:33711): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997275.108:33712): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997275.121:33713): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997275.121:33714): pid=321767 uid=0 auid=0 ses=246 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.125:33715): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321766 suid=0 rport=50640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.125:33716): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321766 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997275.127:33717): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997275.128:33718): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997275.128:33719): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997275.128:33720): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.128:33721): pid=321763 uid=0 auid=0 ses=246 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.751:33722): pid=321783 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321783 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997275.753:33723): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321783 suid=74 rport=50652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997275.753:33724): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321783 suid=74 rport=50652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997275.826:33725): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997275.826:33726): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997275.855:33727): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997275.856:33728): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321783 suid=74 rport=50652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997275.858:33729): pid=321782 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997275.858:33730): pid=321782 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=247 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997275.858:33730): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc1f033e90 a2=1 a3=0 items=0 ppid=38931 pid=321782 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=247 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997275.858:33730): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997275.859:33731): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997275.891:33732): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.892:33733): pid=321785 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997275.894:33734): pid=321785 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997275.936:33735): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997275.936:33736): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997275.937:33737): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321786 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997275.989:33738): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997275.989:33739): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997275.990:33740): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997275.993:33741): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997276.006:33742): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997276.006:33743): pid=321786 uid=0 auid=0 ses=247 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.010:33744): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321785 suid=0 rport=50652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.010:33745): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321785 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997276.013:33746): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997276.013:33747): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997276.014:33748): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997276.014:33749): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.014:33750): pid=321782 uid=0 auid=0 ses=247 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321782 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.652:33751): pid=321802 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321802 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997276.653:33752): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321802 suid=74 rport=50664 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997276.653:33753): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321802 suid=74 rport=50664 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997276.727:33754): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997276.727:33755): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997276.749:33756): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997276.749:33757): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321802 suid=74 rport=50664 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997276.751:33758): pid=321801 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997276.751:33759): pid=321801 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=248 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997276.751:33759): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf2bb74d0 a2=1 a3=0 items=0 ppid=38931 pid=321801 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=248 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997276.751:33759): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997276.753:33760): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997276.790:33761): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.791:33762): pid=321804 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997276.793:33763): pid=321804 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997276.837:33764): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997276.837:33765): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.839:33766): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321805 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997276.898:33767): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997276.898:33768): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997276.899:33769): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997276.901:33770): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997276.913:33771): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997276.914:33772): pid=321805 uid=0 auid=0 ses=248 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.916:33773): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321804 suid=0 rport=50664 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.916:33774): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321804 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997276.918:33775): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997276.919:33776): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997276.919:33777): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997276.919:33778): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997276.920:33779): pid=321801 uid=0 auid=0 ses=248 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321801 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997276.978:33780): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997276.979:33781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997277.135:33782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997277.216:33783): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997277.360:33784): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997277.360:33785): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997277.464:33786): prog-id=1535 op=LOAD
type=SYSCALL msg=audit(1773997277.464:33786): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcfaa41e00 a2=90 a3=9500000000 items=0 ppid=321880 pid=321881 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997277.464:33786): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=CRYPTO_KEY_USER msg=audit(1773997277.498:33787): pid=321885 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321885 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997277.499:33788): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321885 suid=74 rport=39994 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997277.499:33789): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321885 suid=74 rport=39994 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997277.537:33790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997277.549:33791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997277.576:33792): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997277.576:33793): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997277.594:33794): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997277.595:33795): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321885 suid=74 rport=39994 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997277.598:33796): pid=321883 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997277.598:33797): pid=321883 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=249 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997277.598:33797): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff85950840 a2=1 a3=0 items=0 ppid=38931 pid=321883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=249 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997277.598:33797): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997277.600:33798): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997277.624:33799): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997277.625:33800): pid=321914 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997277.626:33801): pid=321914 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997277.630:33802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997277.669:33803): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997277.669:33804): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997277.671:33805): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997277.712:33806): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997277.712:33807): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997277.713:33808): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997277.717:33809): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997277.732:33810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997277.741:33811): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997277.742:33812): pid=321915 uid=0 auid=0 ses=249 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997277.744:33813): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321914 suid=0 rport=39994 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997277.745:33814): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997277.747:33815): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997277.748:33816): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997277.749:33817): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997277.749:33818): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997277.749:33819): pid=321883 uid=0 auid=0 ses=249 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997277.848:33820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997278.297:33821): pid=321950 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321950 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997278.299:33822): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321950 suid=74 rport=40010 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997278.299:33823): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321950 suid=74 rport=40010 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997278.376:33824): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997278.376:33825): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997278.405:33826): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997278.405:33827): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321950 suid=74 rport=40010 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997278.408:33828): pid=321949 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997278.408:33829): pid=321949 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=250 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997278.408:33829): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffacdf8670 a2=1 a3=0 items=0 ppid=38931 pid=321949 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=250 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997278.408:33829): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997278.409:33830): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997278.440:33831): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997278.441:33832): pid=321952 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997278.442:33833): pid=321952 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997278.485:33834): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997278.485:33835): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997278.487:33836): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321953 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997278.548:33837): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997278.549:33838): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997278.551:33839): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997278.555:33840): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997278.569:33841): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997278.569:33842): pid=321953 uid=0 auid=0 ses=250 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997278.572:33843): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321952 suid=0 rport=40010 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997278.573:33844): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321952 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997278.575:33845): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997278.576:33846): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997278.576:33847): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997278.577:33848): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997278.577:33849): pid=321949 uid=0 auid=0 ses=250 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321949 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.072:33850): pid=321969 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321969 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997279.084:33851): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=321969 suid=74 rport=35720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997279.084:33852): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=321969 suid=74 rport=35720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997279.234:33853): pid=321973 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321973 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997279.235:33854): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321973 suid=74 rport=40022 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997279.235:33855): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=321973 suid=74 rport=40022 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997279.312:33856): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997279.312:33857): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997279.330:33858): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997279.343:33859): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997279.343:33860): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321973 suid=74 rport=40022 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997279.345:33861): pid=321972 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997279.345:33862): pid=321972 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=251 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997279.345:33862): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe504139b0 a2=1 a3=0 items=0 ppid=38931 pid=321972 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=251 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997279.345:33862): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997279.347:33863): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997279.375:33864): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.377:33865): pid=321977 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997279.378:33866): pid=321977 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997279.421:33867): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997279.421:33868): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.423:33869): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997279.477:33870): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997279.477:33871): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997279.478:33872): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997279.480:33873): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997279.489:33874): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997279.490:33875): pid=321980 uid=0 auid=0 ses=251 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.492:33876): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321977 suid=0 rport=40022 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.492:33877): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321977 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997279.494:33878): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997279.495:33879): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997279.495:33880): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997279.495:33881): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997279.495:33882): pid=321972 uid=0 auid=0 ses=251 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321972 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997280.046:33883): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997280.091:33884): pid=322009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322009 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997280.093:33885): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322009 suid=74 rport=40026 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997280.093:33886): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322009 suid=74 rport=40026 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997280.163:33887): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997280.177:33888): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997280.177:33889): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997280.200:33890): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997280.202:33891): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322009 suid=74 rport=40026 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997280.205:33892): pid=322008 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997280.206:33893): pid=322008 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=252 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997280.206:33893): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff660c99a0 a2=1 a3=0 items=0 ppid=38931 pid=322008 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=252 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997280.206:33893): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997280.207:33894): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997280.232:33895): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997280.233:33896): pid=322038 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997280.236:33897): pid=322038 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997280.279:33898): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997280.279:33899): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997280.283:33900): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997280.289:33901): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997280.331:33902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997280.333:33903): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997280.334:33904): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997280.335:33905): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997280.338:33906): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997280.350:33907): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997280.350:33908): pid=322051 uid=0 auid=0 ses=252 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997280.353:33909): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322038 suid=0 rport=40026 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997280.354:33910): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322038 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997280.356:33911): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997280.356:33912): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997280.357:33913): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997280.357:33914): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997280.357:33915): pid=322008 uid=0 auid=0 ses=252 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322008 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997280.610:33916): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997280.610:33917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997280.743:33918): prog-id=1536 op=LOAD
type=SYSCALL msg=audit(1773997280.743:33918): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdd151a860 a2=90 a3=9500000000 items=0 ppid=322078 pid=322079 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997280.743:33918): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997280.823:33919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997280.833:33920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997280.948:33921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997281.000:33922): pid=322107 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322107 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997281.001:33923): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322107 suid=74 rport=40036 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997281.001:33924): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322107 suid=74 rport=40036 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997281.077:33925): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997281.077:33926): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997281.109:33927): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997281.109:33928): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322107 suid=74 rport=40036 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997281.111:33929): pid=322106 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997281.111:33930): pid=322106 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=253 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997281.111:33930): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcab3a19c0 a2=1 a3=0 items=0 ppid=38931 pid=322106 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=253 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997281.111:33930): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997281.112:33931): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997281.153:33932): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.154:33933): pid=322109 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997281.156:33934): pid=322109 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997281.199:33935): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997281.199:33936): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.201:33937): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997281.244:33938): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997281.244:33939): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997281.245:33940): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997281.249:33941): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997281.257:33942): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997281.257:33943): pid=322110 uid=0 auid=0 ses=253 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.259:33944): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322109 suid=0 rport=40036 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.259:33945): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322109 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997281.261:33946): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997281.262:33947): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997281.262:33948): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997281.263:33949): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.263:33950): pid=322106 uid=0 auid=0 ses=253 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322106 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997281.889:33951): pid=322126 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322126 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997281.890:33952): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322126 suid=74 rport=40046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997281.890:33953): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322126 suid=74 rport=40046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997281.972:33954): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997281.972:33955): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997282.001:33956): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997282.002:33957): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322126 suid=74 rport=40046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997282.004:33958): pid=322125 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997282.005:33959): pid=322125 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=254 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997282.005:33959): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc97d29600 a2=1 a3=0 items=0 ppid=38931 pid=322125 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=254 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997282.005:33959): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997282.006:33960): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997282.023:33961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997282.041:33962): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.042:33963): pid=322134 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997282.044:33964): pid=322134 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997282.086:33965): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997282.086:33966): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.088:33967): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322142 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997282.145:33968): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997282.145:33969): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997282.147:33970): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997282.151:33971): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997282.163:33972): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997282.163:33973): pid=322142 uid=0 auid=0 ses=254 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.166:33974): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322134 suid=0 rport=40046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.166:33975): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322134 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997282.169:33976): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997282.169:33977): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997282.170:33978): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997282.170:33979): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.170:33980): pid=322125 uid=0 auid=0 ses=254 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322125 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997282.176:33981): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997282.626:33982): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997282.630:33983): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997282.635:33984): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997282.768:33985): pid=322217 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997282.769:33986): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322217 suid=74 rport=40048 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997282.769:33987): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322217 suid=74 rport=40048 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997282.822:33988): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997282.839:33989): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997282.845:33990): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997282.845:33991): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997282.875:33992): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997282.875:33993): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322217 suid=74 rport=40048 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997282.877:33994): pid=322212 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997282.877:33995): pid=322212 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=255 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997282.877:33995): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc4668e760 a2=1 a3=0 items=0 ppid=38931 pid=322212 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=255 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997282.877:33995): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997282.879:33996): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997282.911:33997): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.912:33998): pid=322235 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997282.914:33999): pid=322235 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997282.947:34000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997282.958:34001): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997282.958:34002): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.961:34003): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997282.967:34004): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=321969 suid=74 rport=35720 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997282.968:34005): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321969 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997282.968:34006): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=321968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997282.968:34007): pid=321968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997283.019:34008): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997283.020:34009): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997283.021:34010): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997283.025:34011): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997283.036:34012): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997283.036:34013): pid=322236 uid=0 auid=0 ses=255 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.039:34014): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322235 suid=0 rport=40048 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.040:34015): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322235 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997283.043:34016): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997283.043:34017): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997283.044:34018): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997283.044:34019): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.045:34020): pid=322212 uid=0 auid=0 ses=255 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.643:34021): pid=322252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997283.644:34022): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322252 suid=74 rport=40058 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997283.644:34023): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322252 suid=74 rport=40058 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997283.719:34024): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997283.719:34025): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997283.748:34026): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997283.749:34027): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322252 suid=74 rport=40058 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997283.751:34028): pid=322251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997283.751:34029): pid=322251 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=256 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997283.751:34029): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe896b80e0 a2=1 a3=0 items=0 ppid=38931 pid=322251 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=256 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997283.751:34029): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997283.753:34030): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997283.791:34031): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.792:34032): pid=322254 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997283.794:34033): pid=322254 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997283.837:34034): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997283.837:34035): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.838:34036): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322255 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997283.886:34037): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997283.886:34038): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997283.887:34039): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997283.889:34040): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997283.897:34041): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997283.898:34042): pid=322255 uid=0 auid=0 ses=256 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.900:34043): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322254 suid=0 rport=40058 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.900:34044): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997283.902:34045): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997283.903:34046): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997283.903:34047): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997283.903:34048): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997283.903:34049): pid=322251 uid=0 auid=0 ses=256 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322251 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.530:34050): pid=322271 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322271 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997284.531:34051): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322271 suid=74 rport=40068 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997284.531:34052): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322271 suid=74 rport=40068 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997284.609:34053): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997284.609:34054): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997284.638:34055): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997284.638:34056): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322271 suid=74 rport=40068 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997284.641:34057): pid=322270 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997284.641:34058): pid=322270 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=257 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997284.641:34058): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe94234710 a2=1 a3=0 items=0 ppid=38931 pid=322270 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=257 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997284.641:34058): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997284.642:34059): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997284.670:34060): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.671:34061): pid=322275 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997284.673:34062): pid=322275 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997284.715:34063): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997284.715:34064): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.717:34065): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322276 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997284.773:34066): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997284.773:34067): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997284.774:34068): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997284.777:34069): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997284.788:34070): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997284.788:34071): pid=322276 uid=0 auid=0 ses=257 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.791:34072): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322275 suid=0 rport=40068 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.792:34073): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997284.794:34074): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997284.794:34075): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997284.795:34076): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997284.795:34077): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997284.795:34078): pid=322270 uid=0 auid=0 ses=257 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322270 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997285.107:34079): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997285.254:34080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997285.410:34081): pid=322370 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322370 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997285.411:34082): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322370 suid=74 rport=40072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997285.411:34083): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322370 suid=74 rport=40072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997285.433:34084): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997285.489:34085): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997285.489:34086): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997285.518:34087): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997285.518:34088): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322370 suid=74 rport=40072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997285.521:34089): pid=322369 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997285.521:34090): pid=322369 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=258 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997285.521:34090): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4c4f2630 a2=1 a3=0 items=0 ppid=38931 pid=322369 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=258 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997285.521:34090): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997285.522:34091): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997285.554:34092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997285.554:34093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997285.566:34094): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997285.567:34095): pid=322380 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997285.568:34096): pid=322380 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997285.610:34097): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997285.610:34098): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997285.612:34099): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322389 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997285.656:34100): prog-id=1537 op=LOAD
type=SYSCALL msg=audit(1773997285.656:34100): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc76ee3960 a2=90 a3=9500000000 items=0 ppid=322401 pid=322402 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997285.656:34100): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ACCT msg=audit(1773997285.682:34101): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997285.682:34102): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997285.684:34103): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997285.688:34104): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997285.703:34105): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997285.703:34106): pid=322389 uid=0 auid=0 ses=258 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997285.706:34107): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322380 suid=0 rport=40072 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997285.707:34108): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322380 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997285.710:34109): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997285.710:34110): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997285.711:34111): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997285.712:34112): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997285.712:34113): pid=322369 uid=0 auid=0 ses=258 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322369 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997285.755:34114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997285.764:34115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997285.788:34116): pid=322427 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322427 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=SERVICE_STOP msg=audit(1773997285.797:34117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773997285.802:34118): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=322427 suid=74 rport=35736 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997285.802:34119): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=322427 suid=74 rport=35736 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997285.889:34120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.120:34121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.123:34122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997286.185:34123): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.295:34124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.307:34125): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.313:34126): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.316:34127): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.342:34128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.447:34129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.450:34130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997286.454:34131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.606:34132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.617:34133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997286.620:34134): pid=322644 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322644 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997286.622:34135): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322644 suid=74 rport=40080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997286.622:34136): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322644 suid=74 rport=40080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997286.665:34137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.696:34138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997286.703:34139): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997286.703:34140): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997286.720:34141): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997286.720:34142): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322644 suid=74 rport=40080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997286.722:34143): pid=322639 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997286.722:34144): pid=322639 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=259 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997286.722:34144): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6ff411c0 a2=1 a3=0 items=0 ppid=38931 pid=322639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=259 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997286.722:34144): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997286.723:34145): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997286.752:34146): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.753:34147): pid=322657 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997286.754:34148): pid=322657 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997286.770:34149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997286.785:34150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997286.799:34151): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997286.799:34152): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.801:34153): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997286.847:34154): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997286.847:34155): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F686F72697A6F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997286.849:34156): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997286.853:34157): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997286.866:34158): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997286.866:34159): pid=322658 uid=0 auid=0 ses=259 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.869:34160): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322657 suid=0 rport=40080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.869:34161): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997286.872:34162): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997286.872:34163): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997286.873:34164): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997286.873:34165): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.873:34166): pid=322639 uid=0 auid=0 ses=259 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322639 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997286.888:34167): pid=322674 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322674 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997286.889:34168): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322674 suid=74 rport=40082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997286.889:34169): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322674 suid=74 rport=40082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997286.964:34170): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997286.964:34171): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997286.993:34172): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997286.993:34173): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322674 suid=74 rport=40082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997286.996:34174): pid=322673 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997286.996:34175): pid=322673 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=260 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997286.996:34175): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdeee60c20 a2=1 a3=0 items=0 ppid=38931 pid=322673 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=260 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997286.996:34175): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997286.997:34176): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997287.029:34177): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997287.030:34178): pid=322676 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997287.031:34179): pid=322676 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997287.073:34180): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997287.073:34181): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997287.074:34182): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997287.111:34183): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322676 suid=0 rport=40082 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997287.111:34184): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322676 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997287.114:34185): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997287.114:34186): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997287.115:34187): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997287.115:34188): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997287.115:34189): pid=322673 uid=0 auid=0 ses=260 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322673 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997287.629:34190): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997287.729:34191): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997287.942:34192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997287.997:34193): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322427 suid=74 rport=35736 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997287.997:34194): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322427 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997287.998:34195): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997287.998:34196): pid=322417 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997288.109:34197): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997288.210:34198): pid=322730 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322730 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997288.211:34199): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322730 suid=74 rport=37450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997288.211:34200): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322730 suid=74 rport=37450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997288.284:34201): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997288.284:34202): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997288.303:34203): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997288.306:34204): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997288.307:34205): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322730 suid=74 rport=37450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997288.308:34206): pid=322729 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997288.308:34207): pid=322729 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=261 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997288.308:34207): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefd913cc0 a2=1 a3=0 items=0 ppid=38931 pid=322729 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=261 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997288.308:34207): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997288.309:34208): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997288.335:34209): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.336:34210): pid=322745 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997288.337:34211): pid=322745 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997288.380:34212): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997288.380:34213): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.382:34214): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997288.440:34215): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997288.440:34216): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6B657973746F6E652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997288.441:34217): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997288.444:34218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997288.444:34219): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997288.446:34220): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997288.465:34221): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997288.466:34222): pid=322746 uid=0 auid=0 ses=261 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.469:34223): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322745 suid=0 rport=37450 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.469:34224): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322745 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997288.471:34225): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997288.471:34226): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997288.472:34227): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997288.472:34228): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.472:34229): pid=322729 uid=0 auid=0 ses=261 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.487:34230): pid=322772 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322772 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997288.491:34231): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322772 suid=74 rport=37460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997288.491:34232): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322772 suid=74 rport=37460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997288.567:34233): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997288.568:34234): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997288.569:34235): prog-id=1538 op=LOAD
type=SYSCALL msg=audit(1773997288.569:34235): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc4b3f980 a2=90 a3=9500000000 items=0 ppid=322774 pid=322775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997288.569:34235): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ACCT msg=audit(1773997288.597:34236): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997288.597:34237): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322772 suid=74 rport=37460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997288.600:34238): pid=322767 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997288.600:34239): pid=322767 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=262 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997288.600:34239): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc6d5b8a60 a2=1 a3=0 items=0 ppid=38931 pid=322767 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=262 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997288.600:34239): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997288.601:34240): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997288.641:34241): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997288.648:34242): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.650:34243): pid=322784 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997288.654:34244): pid=322784 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997288.661:34245): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997288.697:34246): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997288.697:34247): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.698:34248): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322796 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.750:34249): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322784 suid=0 rport=37460 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.751:34250): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322784 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997288.753:34251): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997288.754:34252): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997288.754:34253): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997288.754:34254): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997288.755:34255): pid=322767 uid=0 auid=0 ses=262 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322767 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997288.804:34256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997289.638:34257): pid=322819 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322819 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997289.640:34258): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322819 suid=74 rport=37462 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997289.640:34259): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=322819 suid=74 rport=37462 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997289.720:34260): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997289.720:34261): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997289.754:34262): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997289.754:34263): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322819 suid=74 rport=37462 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997289.756:34264): pid=322818 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997289.757:34265): pid=322818 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=263 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997289.757:34265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcb1d04fe0 a2=1 a3=0 items=0 ppid=38931 pid=322818 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=263 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997289.757:34265): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997289.758:34266): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997290.552:34267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997290.557:34268): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997290.566:34269): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997290.569:34270): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997290.572:34271): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997290.578:34272): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997290.580:34273): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_START msg=audit(1773997290.600:34274): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997290.602:34275): pid=322868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997290.604:34276): pid=322868 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997290.648:34277): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997290.648:34278): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997290.650:34279): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322883 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997290.720:34280): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997290.720:34281): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997290.722:34282): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997290.731:34283): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997290.740:34284): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997290.741:34285): pid=322883 uid=0 auid=0 ses=263 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997290.743:34286): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=322868 suid=0 rport=37462 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997290.743:34287): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322868 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997290.746:34288): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997290.746:34289): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997290.747:34290): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997290.747:34291): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997290.747:34292): pid=322818 uid=0 auid=0 ses=263 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322818 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997290.852:34293): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997290.857:34294): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997290.868:34295): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997290.889:34296): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997290.943:34297): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997291.011:34298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997291.151:34299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997291.205:34300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997291.377:34301): pid=323000 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323000 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997291.379:34302): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323000 suid=74 rport=37474 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997291.379:34303): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323000 suid=74 rport=37474 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997291.465:34304): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997291.465:34305): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997291.494:34306): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997291.495:34307): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323000 suid=74 rport=37474 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997291.496:34308): pid=322999 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997291.496:34309): pid=322999 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=264 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997291.496:34309): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff253ebdc0 a2=1 a3=0 items=0 ppid=38931 pid=322999 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=264 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997291.496:34309): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997291.498:34310): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997291.526:34311): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997291.527:34312): pid=323004 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997291.529:34313): pid=323004 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997291.573:34314): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997291.573:34315): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997291.576:34316): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323005 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997291.641:34317): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997291.642:34318): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997291.643:34319): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997291.647:34320): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997291.664:34321): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997291.665:34322): pid=323005 uid=0 auid=0 ses=264 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997291.668:34323): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323004 suid=0 rport=37474 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997291.668:34324): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323004 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997291.671:34325): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997291.672:34326): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997291.673:34327): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997291.673:34328): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997291.673:34329): pid=322999 uid=0 auid=0 ses=264 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=322999 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997291.701:34330): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997291.872:34331): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997292.323:34332): pid=323047 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323047 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997292.323:34333): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323047 suid=74 rport=37482 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997292.323:34334): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323047 suid=74 rport=37482 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997292.404:34335): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997292.404:34336): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997292.434:34337): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997292.435:34338): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323047 suid=74 rport=37482 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997292.437:34339): pid=323046 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997292.437:34340): pid=323046 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=265 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997292.437:34340): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd8fb6ed30 a2=1 a3=0 items=0 ppid=38931 pid=323046 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=265 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997292.437:34340): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997292.439:34341): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997292.457:34342): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997292.461:34343): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997292.464:34344): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997292.485:34345): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.487:34346): pid=323068 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997292.487:34347): pid=323068 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997292.530:34348): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997292.530:34349): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.532:34350): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323085 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.590:34351): pid=323119 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_ACCT msg=audit(1773997292.600:34352): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997292.601:34353): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F626172626963616E5F6B657973746F6E655F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997292.602:34354): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_SESSION msg=audit(1773997292.605:34355): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323119 suid=74 rport=42258 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997292.605:34356): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323119 suid=74 rport=42258 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_START msg=audit(1773997292.610:34357): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997292.625:34358): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997292.626:34359): pid=323085 uid=0 auid=0 ses=265 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.629:34360): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323068 suid=0 rport=37482 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.629:34361): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323068 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997292.631:34362): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997292.632:34363): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997292.633:34364): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997292.633:34365): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997292.633:34366): pid=323046 uid=0 auid=0 ses=265 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323046 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997292.639:34367): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997292.659:34368): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997292.693:34369): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="vpn" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997293.290:34370): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997293.490:34371): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997293.490:34372): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.506:34373): pid=323180 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997293.507:34374): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323180 suid=74 rport=37492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997293.507:34375): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323180 suid=74 rport=37492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997293.600:34376): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.600:34377): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997293.628:34378): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.629:34379): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323180 suid=74 rport=37492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997293.631:34380): pid=323178 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997293.631:34381): pid=323178 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=266 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997293.631:34381): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcaf1daae0 a2=1 a3=0 items=0 ppid=38931 pid=323178 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=266 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997293.631:34381): proctitle=737368643A20726F6F74205B707269765D
type=BPF msg=audit(1773997293.631:34382): prog-id=1539 op=LOAD
type=SYSCALL msg=audit(1773997293.631:34382): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe0d037470 a2=90 a3=9500000000 items=0 ppid=323195 pid=323196 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997293.631:34382): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ROLE_CHANGE msg=audit(1773997293.633:34383): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997293.676:34384): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.677:34385): pid=323200 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997293.679:34386): pid=323200 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997293.723:34387): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997293.723:34388): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=SERVICE_START msg=audit(1773997293.733:34389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.735:34390): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323206 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997293.750:34391): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997293.782:34392): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997293.783:34393): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997293.784:34394): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997293.788:34395): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997293.801:34396): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997293.801:34397): pid=323206 uid=0 auid=0 ses=266 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997293.803:34398): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997293.803:34399): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.804:34400): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323200 suid=0 rport=37492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.804:34401): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323200 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997293.806:34402): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997293.806:34403): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.807:34404): pid=323178 uid=0 auid=0 ses=266 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323178 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.828:34405): pid=323241 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323241 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997293.829:34406): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323241 suid=74 rport=37504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997293.829:34407): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323241 suid=74 rport=37504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997293.858:34408): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997293.904:34409): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.904:34410): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997293.933:34411): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997293.933:34412): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323241 suid=74 rport=37504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997293.935:34413): pid=323234 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997293.935:34414): pid=323234 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=267 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997293.935:34414): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcf4510ee0 a2=1 a3=0 items=0 ppid=38931 pid=323234 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=267 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997293.935:34414): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997293.937:34415): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997293.964:34416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997293.971:34417): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997293.973:34418): pid=323246 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323246 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997293.974:34419): pid=323246 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997294.017:34420): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997294.017:34421): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997294.018:34422): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323257 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997294.064:34423): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323246 suid=0 rport=37504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997294.065:34424): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323246 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997294.069:34425): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997294.069:34426): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997294.070:34427): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997294.070:34428): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997294.070:34429): pid=323234 uid=0 auid=0 ses=267 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323234 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997294.151:34430): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997295.186:34431): pid=323288 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323288 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997295.188:34432): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323288 suid=74 rport=37514 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997295.188:34433): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323288 suid=74 rport=37514 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997295.233:34434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997295.237:34435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997295.264:34436): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997295.264:34437): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997295.294:34438): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997295.294:34439): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323288 suid=74 rport=37514 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997295.296:34440): pid=323287 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997295.296:34441): pid=323287 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=268 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997295.296:34441): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffc1d8a6d0 a2=1 a3=0 items=0 ppid=38931 pid=323287 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=268 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997295.296:34441): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997295.297:34442): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997295.323:34443): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.324:34444): pid=323304 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997295.325:34445): pid=323304 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997295.368:34446): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997295.368:34447): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.370:34448): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323310 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997295.384:34449): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997295.421:34450): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997295.422:34451): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997295.423:34452): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997295.426:34453): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997295.440:34454): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997295.441:34455): pid=323310 uid=0 auid=0 ses=268 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.443:34456): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323304 suid=0 rport=37514 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.444:34457): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323304 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997295.446:34458): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997295.446:34459): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997295.447:34460): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997295.447:34461): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.447:34462): pid=323287 uid=0 auid=0 ses=268 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323287 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.469:34463): pid=323326 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323326 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997295.470:34464): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323326 suid=74 rport=37518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997295.471:34465): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323326 suid=74 rport=37518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997295.549:34466): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997295.549:34467): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997295.570:34468): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997295.571:34469): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323326 suid=74 rport=37518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997295.573:34470): pid=323325 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997295.573:34471): pid=323325 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=269 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997295.573:34471): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff719835b0 a2=1 a3=0 items=0 ppid=38931 pid=323325 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=269 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997295.573:34471): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997295.574:34472): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997295.602:34473): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.603:34474): pid=323328 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997295.604:34475): pid=323328 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997295.647:34476): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997295.647:34477): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.649:34478): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323329 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.689:34479): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323328 suid=0 rport=37518 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.689:34480): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323328 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997295.692:34481): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997295.692:34482): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997295.692:34483): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997295.692:34484): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997295.692:34485): pid=323325 uid=0 auid=0 ses=269 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323325 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997295.793:34486): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997296.297:34487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997296.298:34488): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997296.432:34489): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323119 suid=74 rport=42258 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997296.433:34490): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323119 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997296.434:34491): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323115 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997296.434:34492): pid=323115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997296.474:34493): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997296.637:34494): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997296.818:34495): pid=323393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997296.820:34496): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323393 suid=74 rport=37520 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997296.820:34497): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323393 suid=74 rport=37520 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997296.859:34498): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997296.859:34499): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997296.896:34500): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997296.896:34501): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997296.925:34502): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997296.926:34503): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323393 suid=74 rport=37520 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997296.928:34504): pid=323392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997296.928:34505): pid=323392 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=270 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997296.928:34505): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffdcd333d60 a2=1 a3=0 items=0 ppid=38931 pid=323392 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=270 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997296.928:34505): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997296.930:34506): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997296.975:34507): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997296.977:34508): pid=323412 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997296.978:34509): pid=323412 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997296.985:34510): prog-id=1540 op=LOAD
type=SYSCALL msg=audit(1773997296.985:34510): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc2364dca0 a2=90 a3=9500000000 items=0 ppid=323410 pid=323411 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997296.985:34510): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_LOGIN msg=audit(1773997297.023:34511): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997297.023:34512): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.027:34513): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323416 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997297.055:34514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997297.068:34515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997297.112:34516): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997297.113:34517): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997297.115:34518): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997297.121:34519): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997297.140:34520): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997297.141:34521): pid=323416 uid=0 auid=0 ses=270 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.145:34522): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323412 suid=0 rport=37520 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.146:34523): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323412 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997297.149:34524): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997297.150:34525): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997297.151:34526): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997297.151:34527): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.151:34528): pid=323392 uid=0 auid=0 ses=270 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.173:34529): pid=323451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997297.174:34530): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323451 suid=74 rport=59340 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997297.174:34531): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323451 suid=74 rport=59340 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997297.246:34532): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997297.251:34533): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997297.251:34534): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997297.268:34535): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997297.269:34536): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323451 suid=74 rport=59340 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997297.271:34537): pid=323446 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997297.272:34538): pid=323446 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=271 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997297.272:34538): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc81eb1bf0 a2=1 a3=0 items=0 ppid=38931 pid=323446 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=271 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997297.272:34538): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997297.273:34539): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997297.301:34540): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.303:34541): pid=323458 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997297.304:34542): pid=323458 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997297.347:34543): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997297.347:34544): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.350:34545): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323459 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.409:34546): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323458 suid=0 rport=59340 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.410:34547): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323458 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997297.413:34548): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997297.413:34549): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997297.414:34550): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997297.414:34551): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997297.414:34552): pid=323446 uid=0 auid=0 ses=271 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323446 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997297.621:34553): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997298.218:34554): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997298.221:34555): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997298.347:34556): pid=323521 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323521 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997298.349:34557): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323521 suid=74 rport=59342 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997298.349:34558): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323521 suid=74 rport=59342 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997298.432:34559): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997298.432:34560): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997298.462:34561): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997298.463:34562): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323521 suid=74 rport=59342 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997298.466:34563): pid=323520 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997298.467:34564): pid=323520 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=272 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997298.467:34564): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcd549c640 a2=1 a3=0 items=0 ppid=38931 pid=323520 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=272 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997298.467:34564): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997298.469:34565): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997298.493:34566): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_START msg=audit(1773997298.496:34567): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997298.497:34568): pid=323527 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997298.499:34569): pid=323527 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997298.543:34570): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997298.543:34571): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997298.548:34572): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997298.622:34573): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997298.625:34574): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997298.625:34575): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F766F6C756D652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997298.627:34576): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997298.634:34577): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997298.652:34578): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997298.652:34579): pid=323528 uid=0 auid=0 ses=272 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997298.655:34580): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323527 suid=0 rport=59342 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997298.656:34581): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323527 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997298.658:34582): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997298.659:34583): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997298.661:34584): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997298.661:34585): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997298.661:34586): pid=323520 uid=0 auid=0 ses=272 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323520 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997298.846:34587): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997299.274:34588): pid=323630 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323630 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997299.275:34589): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323630 suid=74 rport=59346 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997299.276:34590): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323630 suid=74 rport=59346 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1773997299.278:34591): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997299.344:34592): pid=323641 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323641 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_AUTH msg=audit(1773997299.352:34593): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997299.352:34594): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773997299.355:34595): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323641 suid=74 rport=44532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997299.355:34596): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323641 suid=74 rport=44532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_ACCT msg=audit(1773997299.382:34597): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997299.382:34598): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323630 suid=74 rport=59346 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997299.385:34599): pid=323627 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997299.385:34600): pid=323627 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=273 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997299.385:34600): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5f2ea400 a2=1 a3=0 items=0 ppid=38931 pid=323627 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=273 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997299.385:34600): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997299.387:34601): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997299.427:34602): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997299.429:34603): pid=323646 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997299.430:34604): pid=323646 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_AUTH msg=audit(1773997299.436:34605): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="administrator" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997299.473:34606): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997299.473:34607): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997299.477:34608): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997299.516:34609): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997299.550:34610): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997299.550:34611): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F63696E6465725F6261636B75702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997299.552:34612): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997299.556:34613): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997299.571:34614): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997299.571:34615): pid=323657 uid=0 auid=0 ses=273 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997299.574:34616): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323646 suid=0 rport=59346 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997299.575:34617): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323646 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997299.578:34618): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997299.578:34619): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997299.579:34620): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997299.579:34621): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997299.579:34622): pid=323627 uid=0 auid=0 ses=273 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997299.860:34623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997299.860:34624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997300.011:34625): prog-id=1541 op=LOAD
type=SYSCALL msg=audit(1773997300.011:34625): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda01d9250 a2=90 a3=9500000000 items=0 ppid=323686 pid=323687 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997300.011:34625): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997300.098:34626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997300.113:34627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997300.218:34628): pid=323716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997300.220:34629): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323716 suid=74 rport=59362 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997300.220:34630): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323716 suid=74 rport=59362 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997300.241:34631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997300.300:34632): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997300.301:34633): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997300.323:34634): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997300.324:34635): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323716 suid=74 rport=59362 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997300.327:34636): pid=323711 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997300.327:34637): pid=323711 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=274 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997300.327:34637): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc4349f790 a2=1 a3=0 items=0 ppid=38931 pid=323711 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=274 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997300.327:34637): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997300.329:34638): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997300.362:34639): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997300.364:34640): pid=323718 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997300.365:34641): pid=323718 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997300.410:34642): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997300.410:34643): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997300.411:34644): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997300.480:34645): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997300.480:34646): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997300.481:34647): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997300.486:34648): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997300.499:34649): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997300.499:34650): pid=323719 uid=0 auid=0 ses=274 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997300.502:34651): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323718 suid=0 rport=59362 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997300.503:34652): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997300.506:34653): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997300.506:34654): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997300.507:34655): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997300.507:34656): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997300.508:34657): pid=323711 uid=0 auid=0 ses=274 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323711 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.110:34658): pid=323735 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323735 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997301.111:34659): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323735 suid=74 rport=59378 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997301.111:34660): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323735 suid=74 rport=59378 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997301.203:34661): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997301.203:34662): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997301.235:34663): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997301.235:34664): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323735 suid=74 rport=59378 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997301.238:34665): pid=323734 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997301.238:34666): pid=323734 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=275 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997301.238:34666): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcef393260 a2=1 a3=0 items=0 ppid=38931 pid=323734 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=275 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997301.238:34666): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997301.240:34667): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997301.269:34668): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.271:34669): pid=323737 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997301.273:34670): pid=323737 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997301.316:34671): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997301.316:34672): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.318:34673): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997301.385:34674): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997301.386:34675): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997301.387:34676): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997301.390:34677): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997301.405:34678): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997301.405:34679): pid=323738 uid=0 auid=0 ses=275 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.408:34680): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323737 suid=0 rport=59378 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.408:34681): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997301.411:34682): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997301.412:34683): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997301.413:34684): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997301.413:34685): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997301.413:34686): pid=323734 uid=0 auid=0 ses=275 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323734 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.036:34687): pid=323759 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323759 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997302.038:34688): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323759 suid=74 rport=59384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997302.038:34689): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323759 suid=74 rport=59384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997302.114:34690): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997302.114:34691): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997302.143:34692): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997302.143:34693): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323759 suid=74 rport=59384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997302.146:34694): pid=323758 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997302.146:34695): pid=323758 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=276 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997302.146:34695): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef7ad39f0 a2=1 a3=0 items=0 ppid=38931 pid=323758 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=276 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997302.146:34695): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997302.148:34696): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997302.182:34697): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.183:34698): pid=323762 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997302.185:34699): pid=323762 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997302.228:34700): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997302.228:34701): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.230:34702): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323763 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997302.296:34703): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997302.296:34704): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6261636B656E645F62696E64392E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997302.297:34705): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997302.301:34706): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997302.315:34707): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997302.315:34708): pid=323763 uid=0 auid=0 ses=276 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.319:34709): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323762 suid=0 rport=59384 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.319:34710): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323762 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997302.322:34711): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997302.322:34712): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997302.323:34713): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997302.323:34714): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997302.323:34715): pid=323758 uid=0 auid=0 ses=276 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323758 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997302.340:34716): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997302.610:34717): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997302.778:34718): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997302.779:34719): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997302.779:34720): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997302.806:34721): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997302.895:34722): prog-id=1542 op=LOAD
type=SYSCALL msg=audit(1773997302.895:34722): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff40f9db50 a2=90 a3=9500000000 items=0 ppid=323832 pid=323833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997302.895:34722): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997302.899:34723): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997302.920:34724): pid=323842 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323842 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997302.922:34725): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323842 suid=74 rport=59400 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997302.922:34726): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323842 suid=74 rport=59400 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997302.999:34727): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997302.999:34728): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.000:34729): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323641 suid=74 rport=44532 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997303.001:34730): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323641 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997303.002:34731): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323640 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997303.002:34732): pid=323640 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997303.021:34733): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997303.031:34734): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.031:34735): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323842 suid=74 rport=59400 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997303.035:34736): pid=323836 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997303.035:34737): pid=323836 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=277 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997303.035:34737): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc90f38ea0 a2=1 a3=0 items=0 ppid=38931 pid=323836 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=277 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997303.035:34737): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997303.036:34738): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997303.078:34739): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997303.079:34740): pid=323866 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997303.081:34741): pid=323866 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997303.105:34742): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997303.124:34743): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997303.125:34744): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=SERVICE_START msg=audit(1773997303.129:34745): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.132:34746): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323871 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997303.142:34747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997303.192:34748): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997303.192:34749): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997303.195:34750): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997303.199:34751): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997303.214:34752): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997303.214:34753): pid=323871 uid=0 auid=0 ses=277 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997303.218:34754): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323866 suid=0 rport=59400 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997303.218:34755): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323866 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997303.221:34756): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997303.221:34757): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997303.222:34758): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997303.222:34759): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997303.222:34760): pid=323836 uid=0 auid=0 ses=277 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323836 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997303.266:34761): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.855:34762): pid=323906 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323906 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997303.856:34763): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323906 suid=74 rport=59404 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997303.856:34764): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323906 suid=74 rport=59404 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997303.933:34765): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.934:34766): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997303.952:34767): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997303.953:34768): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323906 suid=74 rport=59404 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997303.955:34769): pid=323905 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997303.955:34770): pid=323905 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=278 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997303.955:34770): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffde37821e0 a2=1 a3=0 items=0 ppid=38931 pid=323905 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=278 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997303.955:34770): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997303.957:34771): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997303.997:34772): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997303.999:34773): pid=323908 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997304.000:34774): pid=323908 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997304.043:34775): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997304.043:34776): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.045:34777): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323909 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997304.113:34778): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997304.114:34779): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F70726F64756365722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997304.115:34780): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997304.119:34781): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997304.135:34782): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997304.136:34783): pid=323909 uid=0 auid=0 ses=278 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.139:34784): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323908 suid=0 rport=59404 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.139:34785): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323908 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997304.143:34786): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997304.144:34787): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997304.145:34788): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997304.145:34789): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.145:34790): pid=323905 uid=0 auid=0 ses=278 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323905 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.783:34791): pid=323925 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323925 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997304.785:34792): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323925 suid=74 rport=59406 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997304.785:34793): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323925 suid=74 rport=59406 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997304.866:34794): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997304.866:34795): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997304.895:34796): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997304.896:34797): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323925 suid=74 rport=59406 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997304.900:34798): pid=323924 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997304.900:34799): pid=323924 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=279 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997304.900:34799): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffec4bec100 a2=1 a3=0 items=0 ppid=38931 pid=323924 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=279 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997304.900:34799): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997304.901:34800): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997304.926:34801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997304.943:34802): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.945:34803): pid=323933 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997304.947:34804): pid=323933 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997304.990:34805): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997304.990:34806): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997304.993:34807): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323940 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997305.066:34808): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997305.066:34809): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F64657369676E6174655F6D646E732E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997305.068:34810): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997305.070:34811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997305.072:34812): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997305.086:34813): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997305.086:34814): pid=323940 uid=0 auid=0 ses=279 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997305.089:34815): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323933 suid=0 rport=59406 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997305.090:34816): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323933 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997305.093:34817): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997305.094:34818): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997305.094:34819): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997305.095:34820): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997305.095:34821): pid=323924 uid=0 auid=0 ses=279 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323924 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997305.816:34822): pid=323962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997305.829:34823): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323962 suid=74 rport=44560 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997305.830:34824): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=323962 suid=74 rport=44560 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997305.915:34825): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="guest" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997305.950:34826): pid=323964 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323964 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997305.951:34827): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323964 suid=74 rport=59414 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997305.951:34828): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323964 suid=74 rport=59414 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997306.027:34829): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997306.027:34830): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997306.055:34831): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997306.056:34832): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323964 suid=74 rport=59414 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997306.058:34833): pid=323963 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997306.058:34834): pid=323963 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=280 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997306.058:34834): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff85d71440 a2=1 a3=0 items=0 ppid=38931 pid=323963 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=280 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997306.058:34834): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997306.059:34835): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997306.097:34836): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.099:34837): pid=323966 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997306.100:34838): pid=323966 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997306.143:34839): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997306.143:34840): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.144:34841): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323967 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997306.213:34842): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997306.213:34843): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F676C616E63655F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997306.214:34844): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997306.217:34845): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997306.235:34846): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997306.235:34847): pid=323967 uid=0 auid=0 ses=280 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.239:34848): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323966 suid=0 rport=59414 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.239:34849): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323966 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997306.241:34850): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997306.242:34851): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997306.243:34852): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997306.243:34853): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.243:34854): pid=323963 uid=0 auid=0 ses=280 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323963 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.266:34855): pid=323983 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323983 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997306.267:34856): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323983 suid=74 rport=59416 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997306.267:34857): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=323983 suid=74 rport=59416 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997306.357:34858): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997306.357:34859): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997306.390:34860): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997306.390:34861): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323983 suid=74 rport=59416 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997306.393:34862): pid=323982 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997306.393:34863): pid=323982 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=281 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997306.393:34863): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe71e92eb0 a2=1 a3=0 items=0 ppid=38931 pid=323982 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=281 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997306.393:34863): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997306.395:34864): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997306.420:34865): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.422:34866): pid=323985 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997306.423:34867): pid=323985 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997306.467:34868): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997306.467:34869): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.469:34870): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323986 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.515:34871): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323985 suid=0 rport=59416 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.515:34872): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323985 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997306.518:34873): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997306.518:34874): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997306.518:34875): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997306.519:34876): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997306.519:34877): pid=323982 uid=0 auid=0 ses=281 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323982 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997307.333:34878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997307.549:34879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997307.668:34880): pid=324050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997307.670:34881): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324050 suid=74 rport=53062 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997307.670:34882): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324050 suid=74 rport=53062 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997307.675:34883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997307.746:34884): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997307.746:34885): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997307.777:34886): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997307.777:34887): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324050 suid=74 rport=53062 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997307.780:34888): pid=324049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997307.780:34889): pid=324049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=282 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997307.780:34889): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe8964d920 a2=1 a3=0 items=0 ppid=38931 pid=324049 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=282 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997307.780:34889): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997307.781:34890): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997307.787:34891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997307.787:34892): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997307.817:34893): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997307.819:34894): pid=324059 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997307.820:34895): pid=324059 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997307.864:34896): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997307.864:34897): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997307.867:34898): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324065 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997307.913:34899): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997307.930:34900): prog-id=1543 op=LOAD
type=SYSCALL msg=audit(1773997307.930:34900): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fffbaed8830 a2=90 a3=9500000000 items=0 ppid=324079 pid=324081 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997307.930:34900): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ACCT msg=audit(1773997307.962:34901): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997307.963:34902): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997307.964:34903): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997307.969:34904): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997307.985:34905): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997307.985:34906): pid=324065 uid=0 auid=0 ses=282 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997307.988:34907): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324059 suid=0 rport=53062 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997307.989:34908): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324059 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997307.991:34909): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997307.991:34910): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997307.992:34911): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997307.992:34912): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997307.992:34913): pid=324049 uid=0 auid=0 ses=282 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997308.003:34914): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997308.009:34915): pid=324103 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324103 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997308.011:34916): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324103 suid=74 rport=53066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997308.011:34917): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324103 suid=74 rport=53066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997308.063:34918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997308.091:34919): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997308.091:34920): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997308.099:34921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997308.112:34922): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997308.112:34923): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324103 suid=74 rport=53066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997308.114:34924): pid=324100 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997308.114:34925): pid=324100 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=283 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997308.114:34925): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc63490580 a2=1 a3=0 items=0 ppid=38931 pid=324100 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=283 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997308.114:34925): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997308.115:34926): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997308.143:34927): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.144:34928): pid=324128 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997308.145:34929): pid=324128 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997308.184:34930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997308.188:34931): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997308.189:34932): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.192:34933): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997308.236:34934): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997308.237:34935): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.237:34936): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324128 suid=0 rport=53066 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.238:34937): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997308.241:34938): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997308.241:34939): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.242:34940): pid=324100 uid=0 auid=0 ses=283 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324100 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997308.718:34941): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=323962 suid=74 rport=44560 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997308.719:34942): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323962 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997308.720:34943): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=323961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997308.720:34944): pid=323961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997309.367:34945): pid=324147 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324147 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997309.368:34946): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324147 suid=74 rport=53078 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997309.369:34947): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324147 suid=74 rport=53078 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997309.450:34948): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997309.450:34949): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997309.480:34950): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997309.480:34951): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324147 suid=74 rport=53078 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997309.483:34952): pid=324146 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997309.483:34953): pid=324146 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=284 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997309.483:34953): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd693030b0 a2=1 a3=0 items=0 ppid=38931 pid=324146 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=284 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997309.483:34953): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997309.484:34954): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997309.517:34955): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.519:34956): pid=324149 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997309.521:34957): pid=324149 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997309.564:34958): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997309.564:34959): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.566:34960): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324150 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997309.630:34961): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997309.631:34962): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997309.631:34963): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997309.636:34964): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997309.651:34965): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997309.652:34966): pid=324150 uid=0 auid=0 ses=284 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.654:34967): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324149 suid=0 rport=53078 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.655:34968): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324149 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997309.658:34969): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997309.658:34970): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997309.659:34971): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997309.659:34972): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.659:34973): pid=324146 uid=0 auid=0 ses=284 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324146 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.679:34974): pid=324166 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997309.681:34975): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324166 suid=74 rport=53086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997309.681:34976): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324166 suid=74 rport=53086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997309.757:34977): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997309.757:34978): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997309.792:34979): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997309.793:34980): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324166 suid=74 rport=53086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997309.795:34981): pid=324165 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997309.795:34982): pid=324165 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=285 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997309.795:34982): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcaaa72150 a2=1 a3=0 items=0 ppid=38931 pid=324165 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=285 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997309.795:34982): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997309.796:34983): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997309.827:34984): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.829:34985): pid=324168 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997309.831:34986): pid=324168 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997309.873:34987): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997309.873:34988): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.874:34989): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324169 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.916:34990): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324168 suid=0 rport=53086 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.918:34991): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324168 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997309.920:34992): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997309.921:34993): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997309.922:34994): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997309.922:34995): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997309.922:34996): pid=324165 uid=0 auid=0 ses=285 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324165 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997310.000:34997): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997310.388:34998): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997310.389:34999): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997310.643:35000): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997310.860:35001): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997310.860:35002): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997311.003:35003): prog-id=1544 op=LOAD
type=SYSCALL msg=audit(1773997311.003:35003): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd9fe05860 a2=90 a3=9500000000 items=0 ppid=324249 pid=324250 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997311.003:35003): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=CRYPTO_KEY_USER msg=audit(1773997311.047:35004): pid=324254 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324254 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997311.049:35005): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324254 suid=74 rport=53096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997311.049:35006): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324254 suid=74 rport=53096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997311.083:35007): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997311.098:35008): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997311.128:35009): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997311.128:35010): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997311.154:35011): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997311.155:35012): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324254 suid=74 rport=53096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997311.156:35013): pid=324252 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997311.157:35014): pid=324252 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=286 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997311.157:35014): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff4c589060 a2=1 a3=0 items=0 ppid=38931 pid=324252 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=286 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997311.157:35014): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997311.158:35015): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997311.188:35016): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.190:35017): pid=324277 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997311.191:35018): pid=324277 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997311.234:35019): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997311.234:35020): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.236:35021): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324282 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997311.251:35022): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997311.305:35023): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997311.306:35024): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6D616E696C615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997311.310:35025): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997311.314:35026): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997311.327:35027): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997311.328:35028): pid=324282 uid=0 auid=0 ses=286 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.330:35029): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324277 suid=0 rport=53096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.331:35030): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997311.333:35031): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997311.334:35032): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997311.334:35033): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997311.335:35034): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.335:35035): pid=324252 uid=0 auid=0 ses=286 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324252 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.356:35036): pid=324298 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324298 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997311.358:35037): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324298 suid=74 rport=53110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997311.358:35038): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324298 suid=74 rport=53110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997311.434:35039): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997311.434:35040): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997311.463:35041): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997311.463:35042): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324298 suid=74 rport=53110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997311.465:35043): pid=324297 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997311.466:35044): pid=324297 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=287 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997311.466:35044): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe7c74dbd0 a2=1 a3=0 items=0 ppid=38931 pid=324297 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=287 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997311.466:35044): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997311.467:35045): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997311.496:35046): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.497:35047): pid=324300 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324300 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997311.498:35048): pid=324300 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997311.541:35049): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997311.541:35050): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.542:35051): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324301 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.580:35052): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324300 suid=0 rport=53110 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.580:35053): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324300 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997311.583:35054): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997311.584:35055): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997311.584:35056): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997311.584:35057): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997311.585:35058): pid=324297 uid=0 auid=0 ses=287 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324297 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.446:35059): pid=324315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997312.462:35060): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=324315 suid=74 rport=50904 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997312.462:35061): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=324315 suid=74 rport=50904 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997312.532:35062): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997312.545:35063): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="g" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997312.657:35064): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997312.677:35065): pid=324339 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324339 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997312.678:35066): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324339 suid=74 rport=53116 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997312.678:35067): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324339 suid=74 rport=53116 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997312.752:35068): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997312.752:35069): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997312.781:35070): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997312.781:35071): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324339 suid=74 rport=53116 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997312.783:35072): pid=324338 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997312.784:35073): pid=324338 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=288 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997312.784:35073): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe991ffce0 a2=1 a3=0 items=0 ppid=38931 pid=324338 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=288 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997312.784:35073): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997312.785:35074): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997312.821:35075): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.822:35076): pid=324343 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997312.825:35077): pid=324343 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997312.867:35078): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997312.867:35079): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.870:35080): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324344 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997312.933:35081): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997312.933:35082): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E657574726F6E5F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997312.934:35083): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997312.940:35084): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997312.953:35085): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997312.956:35086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997312.963:35087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997312.967:35088): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997312.967:35089): pid=324344 uid=0 auid=0 ses=288 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.970:35090): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324343 suid=0 rport=53116 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.971:35091): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324343 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997312.974:35092): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997312.975:35093): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997312.976:35094): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997312.976:35095): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.976:35096): pid=324338 uid=0 auid=0 ses=288 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324338 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997312.996:35097): pid=324386 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324386 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997312.998:35098): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324386 suid=74 rport=53128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997312.999:35099): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324386 suid=74 rport=53128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997313.083:35100): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997313.083:35101): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997313.108:35102): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997313.109:35103): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324386 suid=74 rport=53128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997313.111:35104): pid=324377 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997313.111:35105): pid=324377 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=289 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997313.111:35105): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd74f625b0 a2=1 a3=0 items=0 ppid=38931 pid=324377 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=289 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997313.111:35105): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997313.112:35106): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997313.114:35107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997313.155:35108): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997313.156:35109): pid=324417 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997313.158:35110): pid=324417 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997313.200:35111): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997313.200:35112): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997313.202:35113): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997313.237:35114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997313.238:35115): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324417 suid=0 rport=53128 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997313.238:35116): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324417 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997313.240:35117): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997313.240:35118): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997313.240:35119): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997313.240:35120): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997313.241:35121): pid=324377 uid=0 auid=0 ses=289 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324377 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997313.249:35122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997314.294:35123): pid=324449 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324449 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997314.295:35124): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324449 suid=74 rport=53138 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997314.295:35125): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324449 suid=74 rport=53138 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997314.369:35126): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997314.369:35127): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997314.399:35128): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997314.400:35129): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324449 suid=74 rport=53138 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997314.402:35130): pid=324448 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997314.402:35131): pid=324448 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=290 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997314.402:35131): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffccc98b910 a2=1 a3=0 items=0 ppid=38931 pid=324448 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=290 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997314.402:35131): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997314.404:35132): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.437:35133): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324315 suid=74 rport=50904 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997314.437:35134): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324315 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997314.439:35135): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324314 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997314.439:35136): pid=324314 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_START msg=audit(1773997314.448:35137): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.449:35138): pid=324451 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997314.451:35139): pid=324451 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997314.494:35140): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997314.494:35141): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.497:35142): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997314.568:35143): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997314.568:35144): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F706C6163656D656E745F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997314.570:35145): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997314.575:35146): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997314.594:35147): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997314.594:35148): pid=324452 uid=0 auid=0 ses=290 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.597:35149): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324451 suid=0 rport=53138 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.598:35150): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997314.602:35151): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997314.602:35152): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997314.603:35153): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997314.603:35154): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.603:35155): pid=324448 uid=0 auid=0 ses=290 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324448 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.624:35156): pid=324468 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324468 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997314.626:35157): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324468 suid=74 rport=53140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997314.626:35158): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324468 suid=74 rport=53140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997314.703:35159): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997314.703:35160): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997314.734:35161): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997314.734:35162): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324468 suid=74 rport=53140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997314.737:35163): pid=324467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997314.737:35164): pid=324467 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=291 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997314.737:35164): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fffff721b20 a2=1 a3=0 items=0 ppid=38931 pid=324467 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=291 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997314.737:35164): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997314.738:35165): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997314.779:35166): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.780:35167): pid=324470 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997314.782:35168): pid=324470 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997314.824:35169): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997314.824:35170): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997314.825:35171): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324471 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997315.036:35172): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324470 suid=0 rport=53140 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997315.037:35173): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324470 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997315.039:35174): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997315.040:35175): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997315.041:35176): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997315.041:35177): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997315.041:35178): pid=324467 uid=0 auid=0 ses=291 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324467 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997315.671:35179): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997315.879:35180): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997315.880:35181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997315.880:35182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997315.985:35183): prog-id=1545 op=LOAD
type=SYSCALL msg=audit(1773997315.985:35183): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc5630e320 a2=90 a3=9500000000 items=0 ppid=324538 pid=324539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997315.985:35183): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997316.050:35184): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997316.062:35185): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997316.201:35186): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.286:35187): pid=324582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997316.288:35188): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324582 suid=74 rport=53144 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997316.288:35189): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324582 suid=74 rport=53144 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997316.361:35190): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.361:35191): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997316.373:35192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997316.377:35193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997316.398:35194): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.398:35195): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324582 suid=74 rport=53144 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997316.401:35196): pid=324581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997316.401:35197): pid=324581 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=292 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997316.401:35197): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd5fd32d60 a2=1 a3=0 items=0 ppid=38931 pid=324581 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=292 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997316.401:35197): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997316.403:35198): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997316.435:35199): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997316.438:35200): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.439:35201): pid=324606 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997316.441:35202): pid=324606 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997316.485:35203): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997316.485:35204): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.490:35205): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324616 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997316.569:35206): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997316.569:35207): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997316.571:35208): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997316.576:35209): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997316.586:35210): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997316.594:35211): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997316.595:35212): pid=324616 uid=0 auid=0 ses=292 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.597:35213): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324606 suid=0 rport=53144 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.598:35214): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324606 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997316.600:35215): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997316.601:35216): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997316.601:35217): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997316.601:35218): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.602:35219): pid=324581 uid=0 auid=0 ses=292 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997316.618:35220): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.619:35221): pid=324651 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324651 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997316.621:35222): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324651 suid=74 rport=53148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997316.623:35223): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_SESSION msg=audit(1773997316.624:35224): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324651 suid=74 rport=53148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997316.624:35225): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997316.700:35226): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.700:35227): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997316.728:35228): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997316.729:35229): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324651 suid=74 rport=53148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997316.737:35230): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997316.740:35231): pid=324649 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997316.740:35232): pid=324649 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=293 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997316.740:35232): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd998d9760 a2=1 a3=0 items=0 ppid=38931 pid=324649 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=293 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997316.740:35232): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997316.741:35233): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997316.741:35234): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997316.776:35235): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997316.780:35236): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.782:35237): pid=324707 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997316.783:35238): pid=324707 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997316.813:35239): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997316.826:35240): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997316.827:35241): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.830:35242): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324729 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.881:35243): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324707 suid=0 rport=53148 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.881:35244): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324707 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997316.884:35245): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997316.884:35246): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997316.884:35247): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997316.885:35248): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997316.885:35249): pid=324649 uid=0 auid=0 ses=293 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324649 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997316.891:35250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997316.922:35251): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997317.026:35252): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997317.133:35253): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997317.164:35254): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997317.191:35255): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997317.991:35256): pid=324835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324835 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997317.993:35257): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324835 suid=74 rport=41590 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997317.993:35258): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324835 suid=74 rport=41590 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1773997318.064:35259): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1773997318.069:35260): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997318.069:35261): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997318.103:35262): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997318.103:35263): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324835 suid=74 rport=41590 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997318.106:35264): pid=324834 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997318.106:35265): pid=324834 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=294 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997318.106:35265): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffef11ad1b0 a2=1 a3=0 items=0 ppid=38931 pid=324834 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=294 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997318.106:35265): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997318.108:35266): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997318.128:35267): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997318.150:35268): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.152:35269): pid=324843 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997318.154:35270): pid=324843 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997318.198:35271): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997318.198:35272): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.201:35273): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324849 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997318.281:35274): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997318.281:35275): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997318.283:35276): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997318.289:35277): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997318.308:35278): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997318.309:35279): pid=324849 uid=0 auid=0 ses=294 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.317:35280): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324843 suid=0 rport=41590 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.317:35281): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324843 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997318.322:35282): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997318.322:35283): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997318.323:35284): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997318.323:35285): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.323:35286): pid=324834 uid=0 auid=0 ses=294 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324834 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.339:35287): pid=324877 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324877 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997318.341:35288): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324877 suid=74 rport=41596 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997318.341:35289): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=324877 suid=74 rport=41596 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997318.418:35290): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997318.418:35291): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997318.452:35292): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997318.452:35293): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324877 suid=74 rport=41596 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997318.455:35294): pid=324876 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997318.455:35295): pid=324876 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=295 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997318.455:35295): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffea82e3430 a2=1 a3=0 items=0 ppid=38931 pid=324876 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=295 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997318.455:35295): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997318.457:35296): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997318.468:35297): prog-id=0 op=UNLOAD
type=USER_START msg=audit(1773997318.485:35298): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.487:35299): pid=324895 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997318.489:35300): pid=324895 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997318.510:35301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997318.531:35302): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997318.531:35303): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.533:35304): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.575:35305): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324895 suid=0 rport=41596 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.575:35306): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997318.581:35307): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997318.581:35308): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997318.581:35309): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997318.581:35310): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997318.582:35311): pid=324876 uid=0 auid=0 ses=295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324876 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997318.762:35312): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997319.086:35313): pid=324928 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324928 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997319.097:35314): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=324928 suid=74 rport=42454 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997319.097:35315): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=324928 suid=74 rport=42454 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997319.111:35316): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997319.111:35317): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997319.185:35318): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="onkar" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997319.252:35319): prog-id=1546 op=LOAD
type=SYSCALL msg=audit(1773997319.252:35319): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc74503e30 a2=90 a3=9500000000 items=0 ppid=324943 pid=324944 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997319.252:35319): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997319.326:35320): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997319.343:35321): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997319.438:35322): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997319.743:35323): pid=325031 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997319.745:35324): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325031 suid=74 rport=41606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997319.745:35325): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325031 suid=74 rport=41606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997319.835:35326): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997319.835:35327): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997319.866:35328): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997319.866:35329): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325031 suid=74 rport=41606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997319.869:35330): pid=325030 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997319.869:35331): pid=325030 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=296 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997319.869:35331): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe79073af0 a2=1 a3=0 items=0 ppid=38931 pid=325030 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=296 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997319.869:35331): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997319.871:35332): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997319.903:35333): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997319.905:35334): pid=325033 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997319.907:35335): pid=325033 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997319.951:35336): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997319.951:35337): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997319.955:35338): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325034 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997320.018:35339): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997320.018:35340): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997320.019:35341): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997320.022:35342): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997320.036:35343): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997320.036:35344): pid=325034 uid=0 auid=0 ses=296 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.039:35345): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325033 suid=0 rport=41606 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.039:35346): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325033 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997320.041:35347): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997320.042:35348): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997320.042:35349): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997320.042:35350): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.042:35351): pid=325030 uid=0 auid=0 ses=296 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.058:35352): pid=325050 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325050 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997320.060:35353): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325050 suid=74 rport=41614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997320.060:35354): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325050 suid=74 rport=41614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997320.137:35355): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997320.137:35356): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997320.166:35357): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997320.166:35358): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325050 suid=74 rport=41614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997320.168:35359): pid=325049 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997320.168:35360): pid=325049 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=297 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997320.168:35360): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe5079c0f0 a2=1 a3=0 items=0 ppid=38931 pid=325049 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=297 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997320.168:35360): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997320.171:35361): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997320.206:35362): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.207:35363): pid=325052 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997320.208:35364): pid=325052 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997320.251:35365): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997320.251:35366): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.253:35367): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325053 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.298:35368): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325052 suid=0 rport=41614 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.300:35369): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325052 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997320.303:35370): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997320.303:35371): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997320.304:35372): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997320.304:35373): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997320.305:35374): pid=325049 uid=0 auid=0 ses=297 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325049 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997320.532:35375): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997320.625:35376): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.120:35377): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=324928 suid=74 rport=42454 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997321.120:35378): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324928 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997321.121:35379): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=324927 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997321.121:35380): pid=324927 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.145:35381): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.148:35382): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.151:35383): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.154:35384): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.158:35385): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.165:35386): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997321.288:35387): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997321.393:35388): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997321.440:35389): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.540:35390): pid=325236 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325236 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997321.541:35391): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325236 suid=74 rport=41624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997321.542:35392): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325236 suid=74 rport=41624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997321.563:35393): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997321.576:35394): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997321.617:35395): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997321.618:35396): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997321.627:35397): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.627:35398): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997321.649:35399): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997321.650:35400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.650:35401): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325236 suid=74 rport=41624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997321.652:35402): pid=325230 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997321.652:35403): pid=325230 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=298 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997321.652:35403): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc877ea4f0 a2=1 a3=0 items=0 ppid=38931 pid=325230 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=298 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997321.652:35403): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997321.653:35404): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997321.685:35405): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.686:35406): pid=325262 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997321.687:35407): pid=325262 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997321.730:35408): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997321.730:35409): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.749:35410): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325266 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997321.787:35411): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997321.816:35412): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997321.817:35413): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F6D657461646174612E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997321.818:35414): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997321.825:35415): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997321.839:35416): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1773997321.843:35417): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997321.843:35418): pid=325266 uid=0 auid=0 ses=298 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.845:35419): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325262 suid=0 rport=41624 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.846:35420): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325262 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997321.849:35421): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997321.849:35422): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997321.850:35423): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997321.850:35424): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.850:35425): pid=325230 uid=0 auid=0 ses=298 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325230 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997321.873:35426): pid=325295 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325295 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997321.874:35427): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325295 suid=74 rport=41632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997321.875:35428): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325295 suid=74 rport=41632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997321.947:35429): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.947:35430): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997321.977:35431): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997321.977:35432): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325295 suid=74 rport=41632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997321.979:35433): pid=325294 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997321.980:35434): pid=325294 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=299 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997321.980:35434): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc40c20cd0 a2=1 a3=0 items=0 ppid=38931 pid=325294 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=299 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997321.980:35434): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997321.982:35435): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997322.007:35436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997322.007:35437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997322.007:35438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997322.032:35439): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997322.034:35440): pid=325311 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997322.035:35441): pid=325311 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997322.086:35442): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997322.086:35443): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997322.088:35444): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325320 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997322.128:35445): prog-id=1547 op=LOAD
type=SYSCALL msg=audit(1773997322.128:35445): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffde96dd640 a2=90 a3=9500000000 items=0 ppid=325327 pid=325329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997322.128:35445): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=CRYPTO_KEY_USER msg=audit(1773997322.137:35446): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325311 suid=0 rport=41632 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997322.138:35447): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325311 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997322.142:35448): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997322.142:35449): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997322.143:35450): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997322.143:35451): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997322.143:35452): pid=325294 uid=0 auid=0 ses=299 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325294 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997322.226:35453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997322.235:35454): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997322.245:35455): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997322.388:35456): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997322.729:35457): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997322.733:35458): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997322.862:35459): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997323.049:35460): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997323.338:35461): pid=325433 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325433 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997323.339:35462): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325433 suid=74 rport=41640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997323.339:35463): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325433 suid=74 rport=41640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997323.416:35464): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997323.416:35465): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997323.448:35466): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997323.449:35467): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325433 suid=74 rport=41640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997323.452:35468): pid=325432 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997323.452:35469): pid=325432 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=300 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997323.452:35469): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff059b7440 a2=1 a3=0 items=0 ppid=38931 pid=325432 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=300 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997323.452:35469): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997323.454:35470): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997323.494:35471): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.496:35472): pid=325435 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997323.497:35473): pid=325435 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997323.541:35474): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997323.541:35475): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.545:35476): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325436 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997323.621:35477): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997323.622:35478): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F7363686564756C65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997323.624:35479): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997323.630:35480): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997323.649:35481): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997323.650:35482): pid=325436 uid=0 auid=0 ses=300 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.653:35483): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325435 suid=0 rport=41640 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.654:35484): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325435 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997323.657:35485): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997323.657:35486): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997323.658:35487): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997323.658:35488): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.659:35489): pid=325432 uid=0 auid=0 ses=300 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325432 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.671:35490): pid=325452 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325452 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997323.673:35491): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325452 suid=74 rport=41650 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997323.673:35492): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325452 suid=74 rport=41650 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997323.749:35493): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997323.749:35494): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997323.779:35495): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997323.779:35496): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325452 suid=74 rport=41650 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997323.782:35497): pid=325451 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997323.782:35498): pid=325451 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=301 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997323.782:35498): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc95628200 a2=1 a3=0 items=0 ppid=38931 pid=325451 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=301 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997323.782:35498): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997323.784:35499): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997323.819:35500): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.821:35501): pid=325454 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997323.823:35502): pid=325454 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997323.865:35503): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997323.865:35504): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.867:35505): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325455 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.909:35506): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325454 suid=0 rport=41650 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.911:35507): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325454 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997323.916:35508): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997323.916:35509): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997323.917:35510): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997323.917:35511): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997323.917:35512): pid=325451 uid=0 auid=0 ses=301 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325451 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997324.623:35513): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997324.625:35514): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997324.881:35515): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997324.910:35516): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.056:35517): pid=325529 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325529 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997325.058:35518): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325529 suid=74 rport=41652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997325.058:35519): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325529 suid=74 rport=41652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997325.109:35520): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997325.109:35521): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997325.134:35522): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.134:35523): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997325.155:35524): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.156:35525): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325529 suid=74 rport=41652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997325.158:35526): pid=325528 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997325.158:35527): pid=325528 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=302 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997325.158:35527): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd02b5d0a0 a2=1 a3=0 items=0 ppid=38931 pid=325528 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=302 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997325.158:35527): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997325.160:35528): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997325.200:35529): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.202:35530): pid=325542 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997325.203:35531): pid=325542 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997325.247:35532): prog-id=1548 op=LOAD
type=SYSCALL msg=audit(1773997325.247:35532): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff810903f0 a2=90 a3=9500000000 items=0 ppid=325547 pid=325548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997325.247:35532): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_LOGIN msg=audit(1773997325.247:35533): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997325.248:35534): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=SERVICE_START msg=audit(1773997325.251:35535): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.251:35536): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325551 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997325.320:35537): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997325.345:35538): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997325.345:35539): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6E6F76615F766E635F70726F78792E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997325.346:35540): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997325.348:35541): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997325.351:35542): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997325.369:35543): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997325.369:35544): pid=325551 uid=0 auid=0 ses=302 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.373:35545): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325542 suid=0 rport=41652 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.373:35546): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325542 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997325.376:35547): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997325.376:35548): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997325.376:35549): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997325.376:35550): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.377:35551): pid=325528 uid=0 auid=0 ses=302 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325528 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.395:35552): pid=325597 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325597 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997325.396:35553): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325597 suid=74 rport=41656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997325.396:35554): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325597 suid=74 rport=41656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997325.473:35555): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.473:35556): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997325.504:35557): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997325.504:35558): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325597 suid=74 rport=41656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997325.507:35559): pid=325594 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997325.507:35560): pid=325594 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=303 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997325.507:35560): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc5d89f440 a2=1 a3=0 items=0 ppid=38931 pid=325594 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=303 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997325.507:35560): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997325.509:35561): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997325.526:35562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997325.531:35563): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_START msg=audit(1773997325.548:35564): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.550:35565): pid=325627 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997325.551:35566): pid=325627 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997325.595:35567): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997325.595:35568): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.598:35569): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325636 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.648:35570): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325627 suid=0 rport=41656 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.649:35571): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325627 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997325.650:35572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_END msg=audit(1773997325.652:35573): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997325.652:35574): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997325.653:35575): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997325.653:35576): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.653:35577): pid=325594 uid=0 auid=0 ses=303 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325594 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997325.693:35578): pid=325657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997325.712:35579): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=325657 suid=74 rport=42464 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997325.712:35580): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=325657 suid=74 rport=42464 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997325.801:35581): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user4" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997326.565:35582): pid=325659 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325659 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997326.567:35583): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325659 suid=74 rport=41660 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997326.568:35584): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325659 suid=74 rport=41660 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997326.635:35585): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997326.645:35586): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997326.645:35587): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997326.677:35588): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997326.678:35589): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325659 suid=74 rport=41660 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997326.680:35590): pid=325658 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997326.680:35591): pid=325658 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=304 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997326.680:35591): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd56e06f40 a2=1 a3=0 items=0 ppid=38931 pid=325658 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=304 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997326.680:35591): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997326.681:35592): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997326.714:35593): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997326.715:35594): pid=325672 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997326.715:35595): pid=325672 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997326.758:35596): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997326.758:35597): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997326.761:35598): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325684 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997326.787:35599): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997326.796:35600): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997326.796:35601): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997326.797:35602): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997326.801:35603): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997326.809:35604): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997326.809:35605): pid=325684 uid=0 auid=0 ses=304 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997326.811:35606): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325672 suid=0 rport=41660 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997326.811:35607): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997326.813:35608): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997326.814:35609): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997326.814:35610): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997326.814:35611): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997326.814:35612): pid=325658 uid=0 auid=0 ses=304 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325658 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.448:35613): pid=325700 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325700 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997327.450:35614): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325700 suid=74 rport=55684 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997327.450:35615): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325700 suid=74 rport=55684 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997327.531:35616): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997327.531:35617): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997327.561:35618): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997327.562:35619): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325700 suid=74 rport=55684 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997327.565:35620): pid=325699 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997327.565:35621): pid=325699 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=305 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997327.565:35621): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffca2aa9fc0 a2=1 a3=0 items=0 ppid=38931 pid=325699 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=305 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997327.565:35621): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997327.567:35622): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997327.605:35623): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.607:35624): pid=325702 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997327.608:35625): pid=325702 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997327.651:35626): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997327.651:35627): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.653:35628): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997327.721:35629): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997327.721:35630): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6170695F63726F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997327.722:35631): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997327.725:35632): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997327.739:35633): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997327.740:35634): pid=325703 uid=0 auid=0 ses=305 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.742:35635): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325702 suid=0 rport=55684 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.743:35636): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325702 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997327.746:35637): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997327.746:35638): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997327.747:35639): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997327.747:35640): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997327.747:35641): pid=325699 uid=0 auid=0 ses=305 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.388:35642): pid=325719 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325719 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997328.390:35643): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325719 suid=74 rport=55690 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997328.390:35644): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325719 suid=74 rport=55690 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997328.467:35645): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997328.467:35646): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997328.497:35647): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997328.498:35648): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325719 suid=74 rport=55690 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997328.500:35649): pid=325718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997328.501:35650): pid=325718 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=306 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997328.501:35650): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc4aaa07c0 a2=1 a3=0 items=0 ppid=38931 pid=325718 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=306 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997328.501:35650): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997328.502:35651): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997328.527:35652): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997328.532:35653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997328.550:35654): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.552:35655): pid=325733 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997328.554:35656): pid=325733 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997328.598:35657): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997328.598:35658): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.603:35659): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325746 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997328.677:35660): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997328.677:35661): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6576616C7561746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997328.679:35662): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997328.685:35663): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997328.706:35664): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997328.706:35665): pid=325746 uid=0 auid=0 ses=306 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.710:35666): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325733 suid=0 rport=55690 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.710:35667): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325733 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997328.714:35668): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997328.714:35669): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997328.715:35670): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997328.715:35671): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.715:35672): pid=325718 uid=0 auid=0 ses=306 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997328.730:35673): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325657 suid=74 rport=42464 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997328.731:35674): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325657 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997328.732:35675): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997328.732:35676): pid=325656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997328.904:35677): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997328.931:35678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997329.109:35679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997329.174:35680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997329.876:35681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997330.110:35682): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997330.110:35683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997330.238:35684): prog-id=1549 op=LOAD
type=SYSCALL msg=audit(1773997330.238:35684): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff83e61340 a2=90 a3=9500000000 items=0 ppid=325863 pid=325864 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997330.238:35684): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997330.289:35685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997330.301:35686): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997330.441:35687): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997330.801:35688): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997331.123:35689): pid=325893 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997331.124:35690): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325893 suid=74 rport=55692 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997331.124:35691): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325893 suid=74 rport=55692 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997331.199:35692): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997331.199:35693): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997331.222:35694): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997331.222:35695): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325893 suid=74 rport=55692 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997331.224:35696): pid=325892 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997331.225:35697): pid=325892 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=307 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997331.225:35697): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce8da7d00 a2=1 a3=0 items=0 ppid=38931 pid=325892 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=307 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997331.225:35697): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997331.226:35698): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997331.258:35699): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997331.259:35700): pid=325895 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997331.260:35701): pid=325895 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997331.304:35702): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997331.304:35703): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997331.306:35704): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325896 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997331.375:35705): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997331.375:35706): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6C697374656E65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997331.376:35707): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997331.382:35708): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997331.398:35709): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997331.398:35710): pid=325896 uid=0 auid=0 ses=307 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997331.401:35711): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325895 suid=0 rport=55692 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997331.401:35712): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325895 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997331.404:35713): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997331.404:35714): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997331.405:35715): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997331.405:35716): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997331.405:35717): pid=325892 uid=0 auid=0 ses=307 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325892 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.052:35718): pid=325912 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325912 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997332.053:35719): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325912 suid=74 rport=55706 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997332.053:35720): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=325912 suid=74 rport=55706 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997332.141:35721): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997332.141:35722): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997332.170:35723): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997332.170:35724): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325912 suid=74 rport=55706 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997332.173:35725): pid=325911 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997332.173:35726): pid=325911 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=308 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997332.173:35726): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffefff14140 a2=1 a3=0 items=0 ppid=38931 pid=325911 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=308 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997332.173:35726): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997332.176:35727): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997332.210:35728): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.212:35729): pid=325914 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997332.213:35730): pid=325914 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997332.256:35731): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997332.256:35732): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.258:35733): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325915 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997332.272:35734): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1773997332.328:35735): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997332.328:35736): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F616F64685F6E6F7469666965722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997332.329:35737): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997332.333:35738): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997332.347:35739): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997332.347:35740): pid=325915 uid=0 auid=0 ses=308 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.350:35741): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325914 suid=0 rport=55706 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.350:35742): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325914 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997332.353:35743): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997332.353:35744): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997332.354:35745): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997332.354:35746): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.354:35747): pid=325911 uid=0 auid=0 ses=308 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325911 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997332.400:35748): pid=325931 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325931 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997332.414:35749): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=325931 suid=74 rport=53676 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997332.414:35750): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=325931 suid=74 rport=53676 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997332.504:35751): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="portal" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997332.745:35752): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997332.839:35753): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997333.007:35754): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997333.135:35755): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997333.139:35756): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997333.139:35757): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997333.139:35758): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997333.256:35759): pid=326051 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326051 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997333.257:35760): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326051 suid=74 rport=55708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997333.258:35761): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326051 suid=74 rport=55708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997333.328:35762): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997333.330:35763): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997333.330:35764): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997333.353:35765): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997333.354:35766): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326051 suid=74 rport=55708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997333.356:35767): pid=326045 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997333.356:35768): pid=326045 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=309 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997333.356:35768): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffce3251bc0 a2=1 a3=0 items=0 ppid=38931 pid=326045 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=309 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997333.356:35768): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997333.358:35769): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997333.361:35770): prog-id=1550 op=LOAD
type=SYSCALL msg=audit(1773997333.361:35770): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc088d0ba0 a2=90 a3=9500000000 items=0 ppid=326063 pid=326064 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997333.361:35770): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_START msg=audit(1773997333.387:35771): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.388:35772): pid=326070 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997333.389:35773): pid=326070 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997333.423:35774): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997333.434:35775): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997333.434:35776): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.436:35777): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326074 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997333.484:35778): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997333.507:35779): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997333.517:35780): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997333.517:35781): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F63656E7472616C2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997333.519:35782): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997333.524:35783): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997333.538:35784): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997333.538:35785): pid=326074 uid=0 auid=0 ses=309 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.541:35786): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326070 suid=0 rport=55708 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.541:35787): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997333.544:35788): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997333.544:35789): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997333.545:35790): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997333.545:35791): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.545:35792): pid=326045 uid=0 auid=0 ses=309 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326045 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.566:35793): pid=326110 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326110 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997333.567:35794): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326110 suid=74 rport=55718 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997333.567:35795): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326110 suid=74 rport=55718 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997333.605:35796): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997333.651:35797): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997333.651:35798): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997333.680:35799): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997333.680:35800): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326110 suid=74 rport=55718 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997333.683:35801): pid=326105 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997333.683:35802): pid=326105 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=310 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997333.683:35802): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff802ce570 a2=1 a3=0 items=0 ppid=38931 pid=326105 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=310 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997333.683:35802): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997333.684:35803): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997333.712:35804): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.713:35805): pid=326118 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997333.715:35806): pid=326118 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997333.758:35807): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997333.758:35808): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.762:35809): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326119 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.807:35810): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326118 suid=0 rport=55718 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.809:35811): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997333.812:35812): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997333.812:35813): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997333.813:35814): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997333.814:35815): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997333.814:35816): pid=326105 uid=0 auid=0 ses=310 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326105 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.696:35817): pid=326133 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326133 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997334.698:35818): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326133 suid=74 rport=55726 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997334.698:35819): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326133 suid=74 rport=55726 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997334.787:35820): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997334.787:35821): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997334.809:35822): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997334.809:35823): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326133 suid=74 rport=55726 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997334.812:35824): pid=326132 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997334.812:35825): pid=326132 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=311 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997334.812:35825): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff258069a0 a2=1 a3=0 items=0 ppid=38931 pid=326132 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=311 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997334.812:35825): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997334.814:35826): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997334.844:35827): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.845:35828): pid=326135 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997334.846:35829): pid=326135 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997334.890:35830): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997334.890:35831): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.892:35832): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997334.962:35833): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997334.963:35834): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F636F6D707574652E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997334.963:35835): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997334.969:35836): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997334.982:35837): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997334.983:35838): pid=326136 uid=0 auid=0 ses=311 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.986:35839): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326135 suid=0 rport=55726 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.987:35840): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326135 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997334.991:35841): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997334.992:35842): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997334.992:35843): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997334.993:35844): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997334.993:35845): pid=326132 uid=0 auid=0 ses=311 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326132 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997335.445:35846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997335.477:35847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997335.575:35848): pid=326177 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326177 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997335.576:35849): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326177 suid=74 rport=55728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997335.576:35850): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326177 suid=74 rport=55728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997335.590:35851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997335.654:35852): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997335.654:35853): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997335.683:35854): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997335.684:35855): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326177 suid=74 rport=55728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997335.686:35856): pid=326175 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997335.686:35857): pid=326175 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=312 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997335.686:35857): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcae23b650 a2=1 a3=0 items=0 ppid=38931 pid=326175 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=312 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997335.686:35857): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997335.688:35858): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997335.718:35859): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997335.720:35860): pid=326179 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997335.721:35861): pid=326179 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997335.765:35862): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997335.766:35863): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997335.768:35864): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326180 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997335.836:35865): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997335.836:35866): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F69706D692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997335.837:35867): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997335.840:35868): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997335.854:35869): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997335.854:35870): pid=326180 uid=0 auid=0 ses=312 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997335.857:35871): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326179 suid=0 rport=55728 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997335.858:35872): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326179 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997335.861:35873): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997335.861:35874): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997335.862:35875): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997335.863:35876): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997335.863:35877): pid=326175 uid=0 auid=0 ses=312 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326175 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.138:35878): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=325931 suid=74 rport=53676 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997336.139:35879): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325931 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997336.141:35880): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=325930 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997336.141:35881): pid=325930 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997336.692:35882): pid=326196 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326196 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997336.694:35883): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326196 suid=74 rport=55742 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997336.694:35884): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326196 suid=74 rport=55742 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997336.770:35885): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997336.770:35886): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997336.800:35887): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997336.800:35888): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326196 suid=74 rport=55742 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997336.803:35889): pid=326195 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997336.803:35890): pid=326195 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=313 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997336.803:35890): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff56f00af0 a2=1 a3=0 items=0 ppid=38931 pid=326195 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=313 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997336.803:35890): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997336.804:35891): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997336.831:35892): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.833:35893): pid=326198 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997336.834:35894): pid=326198 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997336.878:35895): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997336.878:35896): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.880:35897): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326199 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997336.929:35898): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997336.930:35899): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6365696C6F6D657465725F6167656E745F6E6F74696669636174696F6E2E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997336.932:35900): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997336.935:35901): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997336.947:35902): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997336.947:35903): pid=326199 uid=0 auid=0 ses=313 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.950:35904): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326198 suid=0 rport=55742 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.950:35905): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326198 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997336.953:35906): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997336.953:35907): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997336.954:35908): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997336.954:35909): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.954:35910): pid=326195 uid=0 auid=0 ses=313 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326195 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997336.977:35911): pid=326215 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326215 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997336.978:35912): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326215 suid=74 rport=55758 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997336.978:35913): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326215 suid=74 rport=55758 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997337.055:35914): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997337.055:35915): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997337.084:35916): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997337.085:35917): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326215 suid=74 rport=55758 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997337.087:35918): pid=326214 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997337.087:35919): pid=326214 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=314 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997337.087:35919): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcb7ce1350 a2=1 a3=0 items=0 ppid=38931 pid=326214 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=314 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997337.087:35919): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997337.089:35920): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997337.122:35921): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997337.124:35922): pid=326217 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997337.125:35923): pid=326217 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997337.168:35924): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997337.168:35925): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997337.170:35926): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326218 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997337.218:35927): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326217 suid=0 rport=55758 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997337.218:35928): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326217 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997337.222:35929): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997337.222:35930): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997337.223:35931): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997337.223:35932): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997337.223:35933): pid=326214 uid=0 auid=0 ses=314 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326214 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997337.632:35934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997337.829:35935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997338.023:35936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997338.375:35937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997338.375:35938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997338.375:35939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.380:35940): pid=326277 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326277 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997338.382:35941): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326277 suid=74 rport=46478 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997338.382:35942): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326277 suid=74 rport=46478 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997338.472:35943): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.472:35944): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997338.493:35945): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.496:35946): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326277 suid=74 rport=46478 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997338.497:35947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997338.498:35948): pid=326275 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997338.498:35949): pid=326275 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=315 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997338.498:35949): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffcbf85a710 a2=1 a3=0 items=0 ppid=38931 pid=326275 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=315 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997338.498:35949): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997338.500:35950): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997338.512:35951): prog-id=1551 op=LOAD
type=SYSCALL msg=audit(1773997338.512:35951): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff38614690 a2=90 a3=9500000000 items=0 ppid=326312 pid=326313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997338.512:35951): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_START msg=audit(1773997338.530:35952): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.532:35953): pid=326315 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997338.533:35954): pid=326315 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997338.577:35955): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997338.577:35956): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=SERVICE_START msg=audit(1773997338.579:35957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.580:35958): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326322 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997338.607:35959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997338.638:35960): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997338.638:35961): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F7274685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997338.640:35962): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997338.645:35963): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997338.658:35964): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997338.658:35965): pid=326322 uid=0 auid=0 ses=315 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.661:35966): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326315 suid=0 rport=46478 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.662:35967): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326315 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997338.664:35968): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997338.665:35969): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997338.665:35970): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997338.665:35971): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.665:35972): pid=326275 uid=0 auid=0 ses=315 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326275 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.681:35973): pid=326353 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326353 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997338.682:35974): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326353 suid=74 rport=46490 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997338.682:35975): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326353 suid=74 rport=46490 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997338.720:35976): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997338.762:35977): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.762:35978): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997338.785:35979): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997338.786:35980): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326353 suid=74 rport=46490 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997338.788:35981): pid=326348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997338.788:35982): pid=326348 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=316 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997338.788:35982): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd1149d570 a2=1 a3=0 items=0 ppid=38931 pid=326348 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=316 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997338.788:35982): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997338.790:35983): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997338.828:35984): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.830:35985): pid=326359 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997338.831:35986): pid=326359 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997338.875:35987): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997338.875:35988): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.876:35989): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326360 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.924:35990): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326359 suid=0 rport=46490 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.925:35991): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326359 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997338.928:35992): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997338.929:35993): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997338.930:35994): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997338.930:35995): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997338.930:35996): pid=326348 uid=0 auid=0 ses=316 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997339.129:35997): pid=326374 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326374 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997339.148:35998): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=326374 suid=74 rport=39794 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997339.148:35999): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=326374 suid=74 rport=39794 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997339.239:36000): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="user" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997340.129:36001): pid=326376 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326376 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997340.130:36002): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326376 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997340.130:36003): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326376 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997340.210:36004): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997340.210:36005): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997340.239:36006): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997340.239:36007): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326376 suid=74 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997340.241:36008): pid=326375 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997340.242:36009): pid=326375 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=317 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997340.242:36009): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc58b19e70 a2=1 a3=0 items=0 ppid=38931 pid=326375 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=317 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997340.242:36009): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997340.243:36010): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997340.269:36011): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.270:36012): pid=326378 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997340.272:36013): pid=326378 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997340.315:36014): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997340.315:36015): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.318:36016): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326379 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997340.336:36017): prog-id=0 op=UNLOAD
type=USER_ACCT msg=audit(1773997340.384:36018): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997340.384:36019): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F736F7574685F64625F7365727665722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997340.385:36020): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997340.390:36021): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997340.407:36022): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997340.407:36023): pid=326379 uid=0 auid=0 ses=317 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.410:36024): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326378 suid=0 rport=46492 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.411:36025): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326378 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997340.414:36026): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997340.415:36027): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997340.416:36028): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997340.416:36029): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.416:36030): pid=326375 uid=0 auid=0 ses=317 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326375 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.436:36031): pid=326395 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326395 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997340.437:36032): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326395 suid=74 rport=46500 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997340.437:36033): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326395 suid=74 rport=46500 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997340.511:36034): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997340.511:36035): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997340.541:36036): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997340.541:36037): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326395 suid=74 rport=46500 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997340.544:36038): pid=326394 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997340.544:36039): pid=326394 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=318 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997340.544:36039): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd25635660 a2=1 a3=0 items=0 ppid=38931 pid=326394 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=318 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997340.544:36039): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997340.545:36040): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997340.578:36041): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.579:36042): pid=326397 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997340.580:36043): pid=326397 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997340.623:36044): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997340.624:36045): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.625:36046): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326400 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.670:36047): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326397 suid=0 rport=46500 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.670:36048): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326397 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997340.673:36049): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997340.674:36050): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997340.675:36051): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997340.675:36052): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997340.675:36053): pid=326394 uid=0 auid=0 ses=318 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326394 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997340.708:36054): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997340.971:36055): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997341.110:36056): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997341.110:36057): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997341.238:36058): prog-id=1552 op=LOAD
type=SYSCALL msg=audit(1773997341.238:36058): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd43eb8590 a2=90 a3=9500000000 items=0 ppid=326455 pid=326456 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997341.238:36058): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=SERVICE_START msg=audit(1773997341.315:36059): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997341.335:36060): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997341.423:36061): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326374 suid=74 rport=39794 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997341.424:36062): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326374 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997341.425:36063): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326373 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997341.425:36064): pid=326373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997341.491:36065): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997341.900:36066): pid=326488 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326488 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997341.902:36067): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326488 suid=74 rport=46502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997341.902:36068): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326488 suid=74 rport=46502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997341.994:36069): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997341.994:36070): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997342.026:36071): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997342.027:36072): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326488 suid=74 rport=46502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997342.029:36073): pid=326487 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997342.030:36074): pid=326487 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=319 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997342.030:36074): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe07083170 a2=1 a3=0 items=0 ppid=38931 pid=326487 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=319 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997342.030:36074): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997342.032:36075): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997342.066:36076): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.068:36077): pid=326490 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997342.070:36078): pid=326490 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997342.113:36079): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997342.113:36080): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.117:36081): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326491 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997342.183:36082): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997342.183:36083): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F766E5F636C75737465725F6E6F727468642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997342.185:36084): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997342.190:36085): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997342.205:36086): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997342.205:36087): pid=326491 uid=0 auid=0 ses=319 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.207:36088): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326490 suid=0 rport=46502 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.208:36089): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326490 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997342.211:36090): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997342.211:36091): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997342.212:36092): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997342.213:36093): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.213:36094): pid=326487 uid=0 auid=0 ses=319 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326487 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.228:36095): pid=326507 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326507 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997342.229:36096): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326507 suid=74 rport=46504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997342.229:36097): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326507 suid=74 rport=46504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997342.310:36098): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997342.310:36099): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997342.343:36100): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997342.343:36101): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326507 suid=74 rport=46504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997342.345:36102): pid=326506 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997342.345:36103): pid=326506 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=320 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997342.345:36103): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff15521410 a2=1 a3=0 items=0 ppid=38931 pid=326506 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=320 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997342.345:36103): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997342.347:36104): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997342.378:36105): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.380:36106): pid=326509 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997342.381:36107): pid=326509 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997342.424:36108): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997342.424:36109): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.426:36110): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326510 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.469:36111): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326509 suid=0 rport=46504 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.470:36112): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326509 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997342.473:36113): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997342.473:36114): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997342.474:36115): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997342.474:36116): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997342.474:36117): pid=326506 uid=0 auid=0 ses=320 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326506 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997343.037:36118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997343.040:36119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997343.146:36120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997343.196:36121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997343.273:36122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997343.279:36123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997343.281:36124): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997343.339:36125): pid=326583 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997343.345:36126): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326583 suid=74 rport=46516 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997343.345:36127): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326583 suid=74 rport=46516 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997343.421:36128): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997343.421:36129): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997343.457:36130): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997343.458:36131): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326583 suid=74 rport=46516 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997343.460:36132): pid=326582 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997343.460:36133): pid=326582 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=321 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997343.460:36133): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc8b64d130 a2=1 a3=0 items=0 ppid=38931 pid=326582 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=321 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997343.460:36133): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997343.462:36134): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997343.492:36135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997343.498:36136): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997343.500:36137): pid=326607 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997343.502:36138): pid=326607 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997343.545:36139): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997343.545:36140): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997343.548:36141): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997343.605:36142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997343.612:36143): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997343.612:36144): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997343.613:36145): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997343.620:36146): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997343.631:36147): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997343.631:36148): pid=326614 uid=0 auid=0 ses=321 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997343.634:36149): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326607 suid=0 rport=46516 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997343.634:36150): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326607 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997343.637:36151): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997343.637:36152): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997343.638:36153): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997343.638:36154): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997343.638:36155): pid=326582 uid=0 auid=0 ses=321 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326582 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997343.963:36156): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997344.217:36157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997344.295:36158): pid=326657 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326657 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997344.298:36159): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326657 suid=74 rport=46528 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997344.298:36160): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326657 suid=74 rport=46528 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997344.360:36161): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997344.360:36162): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997344.388:36163): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997344.388:36164): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997344.410:36165): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997344.411:36166): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326657 suid=74 rport=46528 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997344.413:36167): pid=326656 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997344.414:36168): pid=326656 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=322 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997344.414:36168): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc08fae810 a2=1 a3=0 items=0 ppid=38931 pid=326656 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=322 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997344.414:36168): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997344.417:36169): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997344.448:36170): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997344.450:36171): pid=326672 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997344.452:36172): pid=326672 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997344.495:36173): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997344.495:36174): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997344.497:36175): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326677 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997344.513:36176): prog-id=1553 op=LOAD
type=SYSCALL msg=audit(1773997344.513:36176): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffdfe6711d0 a2=90 a3=9500000000 items=0 ppid=326674 pid=326675 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997344.513:36176): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ACCT msg=audit(1773997344.571:36177): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997344.572:36178): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6865616C74685F6D616E616765722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997344.573:36179): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997344.580:36180): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997344.599:36181): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997344.612:36182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997344.614:36183): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997344.614:36184): pid=326677 uid=0 auid=0 ses=322 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997344.618:36185): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326672 suid=0 rport=46528 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997344.619:36186): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326672 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997344.623:36187): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997344.623:36188): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997344.624:36189): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997344.625:36190): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997344.625:36191): pid=326656 uid=0 auid=0 ses=322 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326656 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997344.775:36192): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997345.231:36193): pid=326718 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326718 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997345.233:36194): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326718 suid=74 rport=46534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997345.233:36195): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326718 suid=74 rport=46534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997345.312:36196): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997345.312:36197): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997345.333:36198): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997345.333:36199): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326718 suid=74 rport=46534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997345.335:36200): pid=326717 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997345.336:36201): pid=326717 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=323 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997345.336:36201): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe3d9f1f10 a2=1 a3=0 items=0 ppid=38931 pid=326717 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=323 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997345.336:36201): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997345.337:36202): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997345.372:36203): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.374:36204): pid=326720 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997345.376:36205): pid=326720 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997345.420:36206): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997345.420:36207): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.423:36208): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326721 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997345.499:36209): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997345.499:36210): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F727379736C6F672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997345.502:36211): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997345.508:36212): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997345.522:36213): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997345.522:36214): pid=326721 uid=0 auid=0 ses=323 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.524:36215): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326720 suid=0 rport=46534 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.525:36216): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326720 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997345.528:36217): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997345.528:36218): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997345.529:36219): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997345.529:36220): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.529:36221): pid=326717 uid=0 auid=0 ses=323 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326717 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997345.876:36222): pid=326737 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326737 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997345.890:36223): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=326737 suid=74 rport=39806 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997345.890:36224): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=326737 suid=74 rport=39806 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997345.982:36225): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="gitlab" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997346.149:36226): pid=326739 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326739 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997346.151:36227): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326739 suid=74 rport=46548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997346.151:36228): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326739 suid=74 rport=46548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997346.240:36229): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997346.240:36230): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997346.270:36231): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997346.270:36232): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326739 suid=74 rport=46548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997346.272:36233): pid=326738 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997346.273:36234): pid=326738 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=324 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997346.273:36234): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd0432c3c0 a2=1 a3=0 items=0 ppid=38931 pid=326738 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=324 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997346.273:36234): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997346.275:36235): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997346.312:36236): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997346.313:36237): pid=326743 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997346.315:36238): pid=326743 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997346.357:36239): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997346.357:36240): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997346.358:36241): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326744 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997346.418:36242): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997346.418:36243): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F6472697665725F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997346.419:36244): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997346.423:36245): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997346.438:36246): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997346.439:36247): pid=326744 uid=0 auid=0 ses=324 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997346.441:36248): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326743 suid=0 rport=46548 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997346.442:36249): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326743 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997346.461:36250): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997346.462:36251): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997346.463:36252): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997346.464:36253): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997346.464:36254): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997346.464:36255): pid=326738 uid=0 auid=0 ses=324 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326738 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997346.633:36256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997346.640:36257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997346.780:36258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997346.931:36259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997346.934:36260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997346.939:36261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997346.993:36262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997347.031:36263): pid=326864 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326864 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997347.033:36264): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326864 suid=74 rport=46550 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997347.033:36265): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=326864 suid=74 rport=46550 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997347.056:36266): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997347.124:36267): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997347.124:36268): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997347.152:36269): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997347.153:36270): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326864 suid=74 rport=46550 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997347.156:36271): pid=326861 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997347.156:36272): pid=326861 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=325 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997347.156:36272): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd4fc2a8f0 a2=1 a3=0 items=0 ppid=38931 pid=326861 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=325 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997347.156:36272): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997347.158:36273): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997347.178:36274): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997347.185:36275): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997347.200:36276): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997347.202:36277): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997347.217:36278): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997347.219:36279): pid=326944 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997347.220:36280): pid=326944 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997347.226:36281): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_LOGIN msg=audit(1773997347.264:36282): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997347.264:36283): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997347.268:36284): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997347.328:36285): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997347.329:36286): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F686F7573656B656570696E672E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997347.330:36287): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997347.333:36288): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997347.349:36289): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997347.349:36290): pid=326961 uid=0 auid=0 ses=325 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997347.352:36291): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326944 suid=0 rport=46550 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997347.352:36292): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326944 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997347.355:36293): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997347.355:36294): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997347.356:36295): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997347.356:36296): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997347.356:36297): pid=326861 uid=0 auid=0 ses=325 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326861 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997347.377:36298): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997347.477:36299): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997347.614:36300): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997347.652:36301): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997347.984:36302): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=326737 suid=74 rport=39806 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997347.985:36303): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326737 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997347.986:36304): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=326736 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997347.986:36305): pid=326736 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997348.017:36306): pid=327028 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327028 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997348.019:36307): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327028 suid=74 rport=42044 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997348.019:36308): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327028 suid=74 rport=42044 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997348.113:36309): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997348.113:36310): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997348.143:36311): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997348.144:36312): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327028 suid=74 rport=42044 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997348.147:36313): pid=327027 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997348.147:36314): pid=327027 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=326 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997348.147:36314): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffc0088cb00 a2=1 a3=0 items=0 ppid=38931 pid=327027 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=326 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997348.147:36314): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997348.150:36315): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997348.183:36316): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997348.185:36317): pid=327030 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997348.187:36318): pid=327030 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997348.230:36319): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997348.230:36320): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997348.233:36321): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327031 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997348.307:36322): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997348.307:36323): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F6F6374617669615F776F726B65722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997348.309:36324): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997348.314:36325): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997348.330:36326): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997348.330:36327): pid=327031 uid=0 auid=0 ses=326 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997348.333:36328): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997348.333:36329): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997348.333:36330): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327030 suid=0 rport=42044 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997348.334:36331): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327030 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997348.337:36332): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997348.337:36333): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997348.338:36334): pid=327027 uid=0 auid=0 ses=326 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327027 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997348.629:36335): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997348.956:36336): pid=327071 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327071 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997348.957:36337): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327071 suid=74 rport=42046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997348.957:36338): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327071 suid=74 rport=42046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997348.990:36339): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997349.072:36340): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997349.072:36341): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997349.101:36342): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997349.102:36343): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327071 suid=74 rport=42046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997349.105:36344): pid=327070 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997349.105:36345): pid=327070 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=327 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997349.105:36345): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffe4827e460 a2=1 a3=0 items=0 ppid=38931 pid=327070 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=327 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997349.105:36345): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997349.107:36346): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997349.138:36347): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.140:36348): pid=327075 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997349.141:36349): pid=327075 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997349.185:36350): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997349.185:36351): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.188:36352): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327076 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997349.262:36353): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997349.262:36354): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6E657574726F6E5F6167656E742E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997349.263:36355): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997349.267:36356): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997349.281:36357): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997349.281:36358): pid=327076 uid=0 auid=0 ses=327 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.285:36359): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327075 suid=0 rport=42046 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.285:36360): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327075 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997349.289:36361): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997349.289:36362): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997349.290:36363): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997349.290:36364): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.290:36365): pid=327070 uid=0 auid=0 ses=327 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327070 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997349.926:36366): pid=327118 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327118 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997349.928:36367): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327118 suid=74 rport=42052 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997349.928:36368): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327118 suid=74 rport=42052 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_STOP msg=audit(1773997349.973:36369): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997350.017:36370): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997350.017:36371): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997350.039:36372): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997350.041:36373): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327118 suid=74 rport=42052 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997350.044:36374): pid=327111 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997350.044:36375): pid=327111 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=328 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997350.044:36375): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff05b414c0 a2=1 a3=0 items=0 ppid=38931 pid=327111 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=328 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997350.044:36375): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997350.046:36376): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997350.081:36377): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997350.081:36378): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997350.099:36379): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997350.101:36380): pid=327128 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997350.103:36381): pid=327128 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997350.147:36382): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997350.147:36383): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997350.149:36384): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327136 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997350.230:36385): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997350.230:36386): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F6170692E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997350.232:36387): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997350.234:36388): prog-id=1554 op=LOAD
type=SYSCALL msg=audit(1773997350.234:36388): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7fff4bb1b610 a2=90 a3=9500000000 items=0 ppid=327150 pid=327151 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997350.234:36388): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_START msg=audit(1773997350.236:36389): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997350.251:36390): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997350.251:36391): pid=327136 uid=0 auid=0 ses=328 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997350.255:36392): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327128 suid=0 rport=42052 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997350.256:36393): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327128 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997350.259:36394): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997350.260:36395): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997350.261:36396): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997350.261:36397): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997350.261:36398): pid=327111 uid=0 auid=0 ses=328 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327111 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997350.316:36399): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997350.328:36400): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997350.475:36401): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997350.621:36402): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997350.884:36403): pid=327209 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327209 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997350.886:36404): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327209 suid=74 rport=42064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997350.886:36405): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327209 suid=74 rport=42064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997350.975:36406): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997350.975:36407): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997351.005:36408): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997351.006:36409): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327209 suid=74 rport=42064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997351.008:36410): pid=327208 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997351.008:36411): pid=327208 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=329 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997351.008:36411): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff55261d00 a2=1 a3=0 items=0 ppid=38931 pid=327208 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=329 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997351.008:36411): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997351.010:36412): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997351.042:36413): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997351.043:36414): pid=327211 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997351.045:36415): pid=327211 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997351.089:36416): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997351.089:36417): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997351.093:36418): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327212 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997351.166:36419): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997351.167:36420): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997351.168:36421): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997351.173:36422): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997351.189:36423): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997351.189:36424): pid=327212 uid=0 auid=0 ses=329 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997351.193:36425): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327211 suid=0 rport=42064 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997351.194:36426): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327211 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997351.197:36427): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997351.198:36428): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997351.199:36429): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997351.199:36430): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997351.199:36431): pid=327208 uid=0 auid=0 ses=329 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327208 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997351.625:36432): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.628:36433): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.630:36434): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.632:36435): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.635:36436): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.787:36437): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997351.796:36438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997351.905:36439): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997351.973:36440): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997351.983:36441): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997352.035:36442): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997352.052:36443): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997352.171:36444): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997352.190:36445): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997352.368:36446): prog-id=0 op=UNLOAD
type=CRYPTO_KEY_USER msg=audit(1773997352.575:36447): pid=327391 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327391 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997352.578:36448): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327391 suid=74 rport=42080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997352.578:36449): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327391 suid=74 rport=42080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997352.597:36450): pid=327393 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327393 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997352.611:36451): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=327393 suid=74 rport=60752 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997352.611:36452): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=327393 suid=74 rport=60752 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997352.624:36453): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997352.654:36454): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997352.655:36455): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997352.689:36456): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997352.689:36457): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327391 suid=74 rport=42080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997352.693:36458): pid=327390 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997352.694:36459): pid=327390 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=330 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997352.694:36459): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff6a118b30 a2=1 a3=0 items=0 ppid=38931 pid=327390 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=330 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997352.694:36459): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997352.696:36460): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_AUTH msg=audit(1773997352.705:36461): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="john" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_START msg=audit(1773997352.736:36462): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997352.737:36463): pid=327408 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997352.739:36464): pid=327408 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997352.783:36465): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997352.783:36466): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997352.787:36467): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327420 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997352.797:36468): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997352.860:36469): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997352.861:36470): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F636F6E647563746F722E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997352.863:36471): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997352.869:36472): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997352.880:36473): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997352.881:36474): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997352.898:36475): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997352.898:36476): pid=327420 uid=0 auid=0 ses=330 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997352.902:36477): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327408 suid=0 rport=42080 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997352.903:36478): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327408 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997352.907:36479): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997352.907:36480): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997352.908:36481): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997352.908:36482): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997352.909:36483): pid=327390 uid=0 auid=0 ses=330 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327390 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997353.009:36484): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997353.073:36485): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997353.211:36486): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997353.291:36487): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997353.360:36488): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997353.360:36489): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997353.497:36490): pid=327535 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327535 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997353.499:36491): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327535 suid=74 rport=42090 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997353.499:36492): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327535 suid=74 rport=42090 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1773997353.513:36493): prog-id=1555 op=LOAD
type=SYSCALL msg=audit(1773997353.513:36493): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcf1b5f000 a2=90 a3=9500000000 items=0 ppid=327532 pid=327533 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997353.513:36493): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_AUTH msg=audit(1773997353.579:36494): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997353.579:36495): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997353.580:36496): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997353.604:36497): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997353.611:36498): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997353.612:36499): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327535 suid=74 rport=42090 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997353.613:36500): pid=327531 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997353.614:36501): pid=327531 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=331 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997353.614:36501): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff0bdd40d0 a2=1 a3=0 items=0 ppid=38931 pid=327531 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=331 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997353.614:36501): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997353.615:36502): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997353.643:36503): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997353.644:36504): pid=327553 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997353.646:36505): pid=327553 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997353.690:36506): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997353.690:36507): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997353.694:36508): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327562 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997353.756:36509): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997353.763:36510): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997353.763:36511): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F696E73706563746F725F646E736D6173712E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997353.765:36512): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997353.769:36513): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997353.787:36514): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997353.787:36515): pid=327562 uid=0 auid=0 ses=331 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997353.790:36516): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327553 suid=0 rport=42090 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997353.790:36517): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327553 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997353.793:36518): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997353.793:36519): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997353.794:36520): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997353.794:36521): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997353.794:36522): pid=327531 uid=0 auid=0 ses=331 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327531 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.433:36523): pid=327581 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327581 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997354.434:36524): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327581 suid=74 rport=42096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997354.435:36525): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327581 suid=74 rport=42096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997354.511:36526): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997354.511:36527): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997354.540:36528): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997354.541:36529): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327581 suid=74 rport=42096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997354.543:36530): pid=327580 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997354.543:36531): pid=327580 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=332 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997354.543:36531): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffd54efeef0 a2=1 a3=0 items=0 ppid=38931 pid=327580 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=332 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997354.543:36531): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997354.545:36532): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997354.576:36533): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.577:36534): pid=327583 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997354.579:36535): pid=327583 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997354.623:36536): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997354.623:36537): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.627:36538): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327584 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997354.670:36539): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997354.671:36540): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F687474702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997354.672:36541): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997354.675:36542): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997354.686:36543): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997354.686:36544): pid=327584 uid=0 auid=0 ses=332 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.689:36545): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327583 suid=0 rport=42096 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.690:36546): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327583 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997354.692:36547): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997354.693:36548): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997354.693:36549): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997354.693:36550): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997354.694:36551): pid=327580 uid=0 auid=0 ses=332 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327580 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.251:36552): pid=327600 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327600 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997355.253:36553): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327600 suid=74 rport=42104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997355.253:36554): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327600 suid=74 rport=42104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997355.330:36555): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997355.330:36556): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997355.368:36557): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997355.368:36558): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327600 suid=74 rport=42104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997355.371:36559): pid=327599 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997355.371:36560): pid=327599 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=333 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997355.371:36560): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7fff091b2e90 a2=1 a3=0 items=0 ppid=38931 pid=327599 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=333 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997355.371:36560): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997355.373:36561): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997355.393:36562): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997355.414:36563): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.416:36564): pid=327608 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997355.417:36565): pid=327608 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997355.462:36566): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997355.462:36567): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.464:36568): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327614 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_ACCT msg=audit(1773997355.525:36569): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997355.525:36570): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F69726F6E69635F7078655F746674702E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997355.526:36571): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997355.531:36572): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997355.542:36573): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997355.543:36574): pid=327614 uid=0 auid=0 ses=333 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.546:36575): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327608 suid=0 rport=42104 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.546:36576): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327608 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997355.548:36577): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997355.548:36578): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997355.549:36579): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997355.549:36580): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997355.549:36581): pid=327599 uid=0 auid=0 ses=333 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327599 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_STOP msg=audit(1773997355.575:36582): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997355.882:36583): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997355.883:36584): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997356.012:36585): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327393 suid=74 rport=60752 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997356.013:36586): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327393 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997356.014:36587): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327392 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997356.014:36588): pid=327392 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997356.055:36589): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997356.145:36590): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997356.164:36591): pid=327691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327691 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997356.166:36592): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327691 suid=74 rport=42112 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997356.166:36593): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes256-gcm@openssh.com ksize=256 mac=<implicit> pfs=curve25519-sha256 spid=327691 suid=74 rport=42112 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997356.249:36594): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="root" exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997356.249:36595): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997356.278:36596): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997356.279:36597): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327691 suid=74 rport=42112 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997356.281:36598): pid=327690 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997356.282:36599): pid=327690 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=334 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997356.282:36599): arch=c000003e syscall=1 success=yes exit=1 a0=3 a1=7ffccb5648e0 a2=1 a3=0 items=0 ppid=38931 pid=327690 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=334 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997356.282:36599): proctitle=737368643A20726F6F74205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997356.283:36600): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=SERVICE_START msg=audit(1773997356.289:36601): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997356.289:36602): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997356.320:36603): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997356.322:36604): pid=327699 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRED_ACQ msg=audit(1773997356.323:36605): pid=327699 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_LOGIN msg=audit(1773997356.368:36606): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_START msg=audit(1773997356.368:36607): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997356.372:36608): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327706 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=BPF msg=audit(1773997356.437:36609): prog-id=1556 op=LOAD
type=SYSCALL msg=audit(1773997356.437:36609): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffda18f06e0 a2=90 a3=9500000000 items=0 ppid=327720 pid=327721 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997356.437:36609): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=USER_ACCT msg=audit(1773997356.450:36610): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_CMD msg=audit(1773997356.450:36611): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/root" cmd=73797374656D63746C2069732D656E61626C656420747269706C656F5F756E626F756E642E73657276696365 exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="root"
type=CRED_REFR msg=audit(1773997356.452:36612): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_START msg=audit(1773997356.456:36613): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997356.476:36614): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997356.476:36615): pid=327706 uid=0 auid=0 ses=334 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997356.479:36616): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327699 suid=0 rport=42112 laddr=192.168.122.104 lport=22  exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=? res=success'UID="root" AUID="root" SUID="root"
type=CRYPTO_KEY_USER msg=audit(1773997356.479:36617): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327699 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=USER_END msg=audit(1773997356.483:36618): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=CRED_DISP msg=audit(1773997356.483:36619): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/sbin/sshd" hostname=192.168.122.11 addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root"
type=USER_END msg=audit(1773997356.484:36620): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=USER_LOGOUT msg=audit(1773997356.484:36621): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=0 exe="/usr/sbin/sshd" hostname=? addr=192.168.122.11 terminal=ssh res=success'UID="root" AUID="root" ID="root"
type=CRYPTO_KEY_USER msg=audit(1773997356.485:36622): pid=327690 uid=0 auid=0 ses=334 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327690 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root" SUID="root"
type=SERVICE_START msg=audit(1773997356.533:36623): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997356.549:36624): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997356.676:36625): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997357.627:36626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997357.781:36627): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997358.980:36628): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997359.019:36629): prog-id=1557 op=LOAD
type=SYSCALL msg=audit(1773997359.019:36629): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffc97feea70 a2=90 a3=9500000000 items=0 ppid=327849 pid=327850 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997359.019:36629): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F613834306330393733626163363734663335346630646563306233303939
type=SERVICE_START msg=audit(1773997359.149:36630): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997359.282:36631): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997359.282:36632): pid=327980 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327980 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997359.289:36633): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=327980 suid=74 rport=42100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997359.289:36634): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=327980 suid=74 rport=42100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997359.403:36635): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997359.708:36636): prog-id=1558 op=LOAD
type=BPF msg=audit(1773997359.708:36637): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.712:36638): prog-id=1559 op=LOAD
type=BPF msg=audit(1773997359.712:36639): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.713:36640): prog-id=1560 op=LOAD
type=BPF msg=audit(1773997359.713:36641): prog-id=1561 op=LOAD
type=BPF msg=audit(1773997359.713:36642): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.713:36643): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.721:36644): prog-id=1562 op=LOAD
type=BPF msg=audit(1773997359.722:36645): prog-id=1563 op=LOAD
type=BPF msg=audit(1773997359.722:36646): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.722:36647): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.732:36648): prog-id=1564 op=LOAD
type=BPF msg=audit(1773997359.732:36649): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.736:36650): prog-id=1565 op=LOAD
type=BPF msg=audit(1773997359.736:36651): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.736:36652): prog-id=1566 op=LOAD
type=BPF msg=audit(1773997359.736:36653): prog-id=1567 op=LOAD
type=BPF msg=audit(1773997359.736:36654): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997359.736:36655): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997359.749:36656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997359.749:36657): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997359.888:36658): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997360.820:36659): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997360.832:36660): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997361.784:36661): prog-id=1568 op=LOAD
type=SYSCALL msg=audit(1773997361.784:36661): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffe5639aec0 a2=90 a3=9500000000 items=0 ppid=328529 pid=328530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997361.784:36661): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F396133373036616163373866633134373539356238663438376435383135
type=BPF msg=audit(1773997361.820:36662): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.591:36663): prog-id=1569 op=LOAD
type=BPF msg=audit(1773997362.591:36664): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.596:36665): prog-id=1570 op=LOAD
type=BPF msg=audit(1773997362.596:36666): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.596:36667): prog-id=1571 op=LOAD
type=BPF msg=audit(1773997362.596:36668): prog-id=1572 op=LOAD
type=BPF msg=audit(1773997362.596:36669): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.596:36670): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.606:36671): prog-id=1573 op=LOAD
type=BPF msg=audit(1773997362.606:36672): prog-id=1574 op=LOAD
type=BPF msg=audit(1773997362.606:36673): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.606:36674): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.617:36675): prog-id=1575 op=LOAD
type=BPF msg=audit(1773997362.617:36676): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.622:36677): prog-id=1576 op=LOAD
type=BPF msg=audit(1773997362.622:36678): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.622:36679): prog-id=1577 op=LOAD
type=BPF msg=audit(1773997362.622:36680): prog-id=1578 op=LOAD
type=BPF msg=audit(1773997362.622:36681): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.622:36682): prog-id=0 op=UNLOAD
type=SERVICE_STOP msg=audit(1773997362.671:36683): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997362.827:36684): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997362.827:36685): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997362.926:36686): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997362.967:36687): prog-id=1579 op=LOAD
type=SYSCALL msg=audit(1773997362.967:36687): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcd564a580 a2=90 a3=9500000000 items=0 ppid=328752 pid=328754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997362.967:36687): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F363166623664626462616338386462616331633231376661393733646537
type=CRYPTO_KEY_USER msg=audit(1773997363.029:36688): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=327980 suid=74 rport=42100 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997363.030:36689): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327980 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997363.031:36690): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=327968 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997363.031:36691): pid=327968 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.076:36692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.093:36693): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_scheduler comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997363.155:36694): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997363.252:36695): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.369:36696): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.369:36697): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997363.369:36698): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.481:36699): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997363.566:36700): prog-id=1580 op=LOAD
type=SYSCALL msg=audit(1773997363.566:36700): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffcc80473f0 a2=90 a3=9500000000 items=0 ppid=328858 pid=328859 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997363.566:36700): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F616239333737346331376262633937396436303936366331643039326562
type=SERVICE_STOP msg=audit(1773997363.601:36701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.620:36702): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997363.634:36703): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=tripleo_nova_conductor comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997363.656:36704): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997363.741:36705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997365.625:36706): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997365.630:36707): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=BPF msg=audit(1773997365.661:36708): prog-id=1581 op=LOAD
type=SYSCALL msg=audit(1773997365.661:36708): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffd5dbeac40 a2=90 a3=9500000000 items=0 ppid=329185 pid=329190 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997365.661:36708): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F303134353930343865646565376339373232633534316430366163626566
type=SERVICE_STOP msg=audit(1773997365.776:36709): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997365.934:36710): pid=329349 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=329349 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997365.948:36711): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=329349 suid=74 rport=42126 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997365.948:36712): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=329349 suid=74 rport=42126 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=BPF msg=audit(1773997366.387:36713): prog-id=1582 op=LOAD
type=BPF msg=audit(1773997366.387:36714): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.392:36715): prog-id=1583 op=LOAD
type=BPF msg=audit(1773997366.392:36716): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.392:36717): prog-id=1584 op=LOAD
type=BPF msg=audit(1773997366.392:36718): prog-id=1585 op=LOAD
type=BPF msg=audit(1773997366.392:36719): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.392:36720): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.401:36721): prog-id=1586 op=LOAD
type=BPF msg=audit(1773997366.401:36722): prog-id=1587 op=LOAD
type=BPF msg=audit(1773997366.401:36723): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.401:36724): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.411:36725): prog-id=1588 op=LOAD
type=BPF msg=audit(1773997366.411:36726): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.415:36727): prog-id=1589 op=LOAD
type=BPF msg=audit(1773997366.415:36728): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.415:36729): prog-id=1590 op=LOAD
type=BPF msg=audit(1773997366.415:36730): prog-id=1591 op=LOAD
type=BPF msg=audit(1773997366.415:36731): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997366.415:36732): prog-id=0 op=UNLOAD
type=USER_AUTH msg=audit(1773997366.577:36733): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="fastuser" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773997366.634:36734): pid=317031 uid=0 auid=0 ses=183 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997366.636:36735): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997366.672:36736): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997368.637:36737): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997368.790:36738): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997368.834:36739): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=329349 suid=74 rport=42126 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997368.835:36740): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=329349 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997368.836:36741): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=329348 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997368.836:36742): pid=329348 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=BPF msg=audit(1773997369.309:36743): prog-id=1592 op=LOAD
type=SYSCALL msg=audit(1773997369.309:36743): arch=c000003e syscall=321 success=yes exit=7 a0=5 a1=7ffd2117fa70 a2=90 a3=9500000001 items=0 ppid=329803 pid=329804 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="3" exe="/" subj=system_u:system_r:container_runtime_t:s0 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="unset" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997369.309:36743): proctitle=2F7573722F62696E2F6372756E002D2D73797374656D642D6367726F7570002D2D6C6F672D666F726D61743D6A736F6E002D2D6C6F67002F72756E2F636F6E7461696E6572732F73746F726167652F6F7665726C61792D636F6E7461696E6572732F333335356562613238633635653138393131343166633931393166313032
type=USER_ACCT msg=audit(1773997369.352:36744): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_CMD msg=audit(1773997369.353:36745): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='cwd="/" cmd="kolla_set_configs" exe="/usr/bin/sudo" terminal=? res=success'UID="root" AUID="unset"
type=CRED_REFR msg=audit(1773997369.354:36746): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997369.396:36747): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997369.429:36748): pid=329850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997369.429:36749): pid=329850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773997369.430:36750): pid=329850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997369.431:36751): pid=329850 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=0 tty=(none) old-ses=4294967295 ses=335 res=1UID="root" OLD-AUID="unset" AUID="root"
type=SYSCALL msg=audit(1773997369.431:36751): arch=c000003e syscall=1 success=yes exit=1 a0=7 a1=7ffff88d1970 a2=1 a3=0 items=0 ppid=1 pid=329850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=335 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997369.431:36751): proctitle="(systemd)"
type=USER_START msg=audit(1773997369.434:36752): pid=329850 uid=0 auid=0 ses=335 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="root"
type=BPF msg=audit(1773997369.459:36753): prog-id=1593 op=LOAD
type=SYSCALL msg=audit(1773997369.459:36753): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef8a8e5a0 a2=90 a3=0 items=0 ppid=1 pid=329850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=335 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997369.459:36753): proctitle="(systemd)"
type=BPF msg=audit(1773997369.460:36754): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997369.460:36755): prog-id=1594 op=LOAD
type=SYSCALL msg=audit(1773997369.460:36755): arch=c000003e syscall=321 success=yes exit=8 a0=5 a1=7ffef8a8e640 a2=90 a3=4 items=0 ppid=1 pid=329850 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=335 comm="systemd" exe="/usr/lib/systemd/systemd" subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=bpf AUID="root" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997369.460:36755): proctitle="(systemd)"
type=BPF msg=audit(1773997369.460:36756): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.068:36757): prog-id=1595 op=LOAD
type=BPF msg=audit(1773997370.068:36758): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.072:36759): prog-id=1596 op=LOAD
type=BPF msg=audit(1773997370.072:36760): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.072:36761): prog-id=1597 op=LOAD
type=BPF msg=audit(1773997370.072:36762): prog-id=1598 op=LOAD
type=BPF msg=audit(1773997370.072:36763): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.072:36764): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.081:36765): prog-id=1599 op=LOAD
type=BPF msg=audit(1773997370.081:36766): prog-id=1600 op=LOAD
type=BPF msg=audit(1773997370.081:36767): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.081:36768): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.091:36769): prog-id=1601 op=LOAD
type=BPF msg=audit(1773997370.091:36770): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.096:36771): prog-id=1602 op=LOAD
type=BPF msg=audit(1773997370.096:36772): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.096:36773): prog-id=1603 op=LOAD
type=BPF msg=audit(1773997370.097:36774): prog-id=1604 op=LOAD
type=BPF msg=audit(1773997370.097:36775): prog-id=0 op=UNLOAD
type=BPF msg=audit(1773997370.097:36776): prog-id=0 op=UNLOAD
type=SERVICE_START msg=audit(1773997370.137:36777): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997370.229:36778): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997370.292:36779): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773997370.292:36780): pid=329833 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:spc_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997371.033:36781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997372.523:36782): pid=330278 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330278 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997372.534:36783): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=330278 suid=74 rport=40694 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997372.534:36784): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=330278 suid=74 rport=40694 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997372.616:36785): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="test" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997373.626:36786): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997373.630:36787): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997373.634:36788): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997373.637:36789): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997373.641:36790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997373.900:36791): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997373.905:36792): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997373.948:36793): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997374.075:36794): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997375.810:36795): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997376.326:36796): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=330278 suid=74 rport=40694 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997376.327:36797): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330278 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997376.329:36798): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330274 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997376.329:36799): pid=330274 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.622:36800): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.626:36801): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.628:36802): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.630:36803): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.633:36804): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.634:36805): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.636:36806): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.640:36807): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997377.766:36808): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997377.937:36809): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997377.998:36810): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.026:36811): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.071:36812): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.095:36813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.141:36814): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.185:36815): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.295:36816): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997378.464:36817): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997379.171:36818): pid=330962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330962 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997379.182:36819): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=330962 suid=74 rport=39698 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997379.182:36820): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=330962 suid=74 rport=39698 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997379.260:36821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997379.279:36822): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="oracle" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997379.608:36823): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_DISP msg=audit(1773997380.383:36824): pid=329853 uid=0 auid=0 ses=335 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="root" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="root"
type=SERVICE_STOP msg=audit(1773997380.385:36825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997380.418:36826): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user-runtime-dir@0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997382.302:36827): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=330962 suid=74 rport=39698 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997382.303:36828): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330962 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997382.304:36829): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=330961 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997382.304:36830): pid=330961 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.329:36831): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.334:36832): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.340:36833): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.345:36834): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.351:36835): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.356:36836): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.361:36837): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.592:36838): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.735:36839): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.787:36840): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997382.839:36841): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.884:36842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.911:36843): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997382.927:36844): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997383.047:36845): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997383.048:36846): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997383.064:36847): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997383.087:36848): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997383.152:36849): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997383.377:36850): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997383.545:36851): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997385.628:36852): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997385.817:36853): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997385.973:36854): pid=331481 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=331481 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997385.986:36855): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=331481 suid=74 rport=39712 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997385.987:36856): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=331481 suid=74 rport=39712 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997386.092:36857): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997386.095:36858): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="runner" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997386.241:36859): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997388.110:36860): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=331481 suid=74 rport=39712 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997388.111:36861): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=331481 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997388.112:36862): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=331480 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997388.112:36863): pid=331480 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997388.131:36864): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997388.290:36865): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997390.626:36866): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997390.631:36867): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997390.636:36868): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997390.895:36869): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997390.919:36870): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997391.071:36871): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997391.112:36872): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997391.173:36873): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997392.637:36874): pid=332727 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=332727 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997392.653:36875): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=332727 suid=74 rport=60922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997392.653:36876): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=332727 suid=74 rport=60922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997392.731:36877): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="www" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997393.610:36878): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997393.614:36879): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997393.717:36880): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997393.784:36881): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997393.807:36882): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997393.877:36883): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997393.893:36884): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997393.990:36885): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997394.993:36886): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=332727 suid=74 rport=60922 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997394.993:36887): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=332727 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997394.994:36888): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=332722 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997394.994:36889): pid=332722 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997396.631:36890): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997396.740:36891): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997399.375:36892): pid=333357 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=333357 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997399.388:36893): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=333357 suid=74 rport=40354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997399.388:36894): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=333357 suid=74 rport=40354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997399.469:36895): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997399.481:36896): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root2" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997399.633:36897): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997401.592:36898): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=333357 suid=74 rport=40354 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997401.593:36899): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=333357 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997401.594:36900): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=333355 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997401.594:36901): pid=333355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997401.612:36902): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997401.835:36903): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997404.631:36904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997404.636:36905): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997404.640:36906): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997404.643:36907): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997404.781:36908): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997404.841:36909): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997404.848:36910): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997404.927:36911): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997406.027:36912): pid=334002 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334002 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997406.040:36913): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=334002 suid=74 rport=40356 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997406.040:36914): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=334002 suid=74 rport=40356 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997406.126:36915): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997406.133:36916): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="mysql" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997406.355:36917): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.631:36918): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.635:36919): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.639:36920): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.643:36921): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.647:36922): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.650:36923): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.654:36924): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.658:36925): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997408.662:36926): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997408.909:36927): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997408.968:36928): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997408.979:36929): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.050:36930): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.085:36931): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.103:36932): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.117:36933): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.261:36934): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997409.537:36935): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997409.626:36936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997410.060:36937): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997410.225:36938): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=334002 suid=74 rport=40356 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997410.226:36939): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334002 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997410.227:36940): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334001 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997410.227:36941): pid=334001 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997412.535:36942): pid=334704 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334704 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997412.549:36943): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=334704 suid=74 rport=41440 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997412.550:36944): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=334704 suid=74 rport=41440 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997412.622:36945): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997412.700:36946): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="tom" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997412.760:36947): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997412.793:36948): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997412.809:36949): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997412.956:36950): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997412.975:36951): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997412.979:36952): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997412.982:36953): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997413.113:36954): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997413.116:36955): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997413.119:36956): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.139:36957): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997413.196:36958): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.218:36959): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.287:36960): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.340:36961): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.467:36962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.476:36963): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.550:36964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997413.560:36965): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.573:36966): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997413.767:36967): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997415.374:36968): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=334704 suid=74 rport=41440 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997415.375:36969): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334704 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997415.376:36970): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=334703 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997415.376:36971): pid=334703 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997416.637:36972): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997416.642:36973): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997416.885:36974): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997416.892:36975): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997417.500:36976): pid=335140 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335140 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997417.501:36977): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335140 suid=74 rport=59524 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997417.501:36978): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335140 suid=74 rport=59524 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997417.578:36979): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997417.591:36980): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997417.591:36981): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997417.616:36982): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997417.616:36983): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335140 suid=74 rport=59524 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997417.618:36984): pid=335139 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997417.619:36985): pid=335139 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=336 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1773997417.619:36985): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffee2b6e5a0 a2=4 a3=3e8 items=0 ppid=38931 pid=335139 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=336 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997417.619:36985): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997417.620:36986): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1773997417.671:36987): pid=335143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997417.671:36988): pid=335143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773997417.672:36989): pid=335143 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997417.673:36990): pid=335143 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=337 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1773997417.673:36990): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7ffff88d1970 a2=4 a3=3e8 items=0 ppid=1 pid=335143 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=337 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997417.673:36990): proctitle="(systemd)"
type=USER_START msg=audit(1773997417.676:36991): pid=335143 uid=0 auid=1000 ses=337 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_START msg=audit(1773997417.918:36992): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997417.946:36993): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997417.948:36994): pid=335166 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335166 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1773997417.951:36995): pid=335166 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1773997417.996:36996): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1773997417.996:36997): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997417.999:36998): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335167 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1773997418.061:36999): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1773997418.062:37000): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D767569706F6A766C7277696A70616265676E6A636C78786A676B707A726E7376203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1773997418.063:37001): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1773997418.067:37002): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=SERVICE_START msg=audit(1773997418.666:37003): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997418.856:37004): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=42f8e06c2ca351ff27a02ec432db643ddc7179eef7a94ef6c102d44e74a5fa41 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_END msg=audit(1773997418.900:37005): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1773997418.900:37006): pid=335180 uid=1000 auid=1000 ses=336 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1773997418.905:37007): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1773997418.905:37008): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997419.325:37009): pid=335305 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335305 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997419.326:37010): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=335305 suid=74 rport=55014 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997419.327:37011): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=335305 suid=74 rport=55014 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997419.528:37012): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="kafka" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997421.631:37013): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997421.635:37014): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997421.639:37015): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997421.643:37016): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997421.907:37017): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1b7ea20b4dc9d97cc3dc1bad14d7e46bdff0862e7879d316efac340a259adc7a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997421.964:37018): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=b24bdb4dab7cc82204395bee381511aacbedeedb951b6e6a91dc7ecd46f57eb3 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997422.019:37019): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=cda0fd4a438eb5886ad87331b6513ad829e1b912522e88657e10affb01172ded comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997422.271:37020): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=34a14b0cfde677d34703b644079f4ae0fc8c8e6345c2ca78f83fd0eabfcf0156 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997422.511:37021): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335305 suid=74 rport=55014 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997422.512:37022): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335305 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997422.513:37023): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335247 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997422.513:37024): pid=335247 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997424.623:37025): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997424.628:37026): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997424.632:37027): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997424.636:37028): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997424.812:37029): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ab93774c17bbc979d60966c1d092ebcd1708ffe6b1bd74f27ef46563089e202b comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997424.840:37030): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f6fa2efeb5a592a77f3f2085c2b43ed50c702d7a2f80a42b7fd2da970806a27d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997424.862:37031): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1daca7afc050535eeabb89c1d9fb24aedd32dcd2994ca990b5ed5a13c1b2d531 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997424.990:37032): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=61fb6dbdbac88dbac1c217fa973de7e21ad62788cbd1720ce7fccc301294c294 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997425.960:37033): pid=335851 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335851 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997425.963:37034): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=335851 suid=74 rport=55030 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997425.963:37035): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=335851 suid=74 rport=55030 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997426.137:37036): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="reza" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997427.634:37037): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997427.688:37038): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335166 suid=1000 rport=59524 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997427.688:37039): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335166 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1773997427.694:37040): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1773997427.694:37041): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997427.695:37042): pid=335139 uid=0 auid=1000 ses=336 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335139 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_STOP msg=audit(1773997427.789:37043): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d948cdb4dafa494cb307d37ed2227e1eebb78f921e74412991c9b94dd2ea2efa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997429.052:37044): pid=335998 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335998 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997429.053:37045): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335998 suid=74 rport=59086 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997429.054:37046): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=335998 suid=74 rport=59086 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997429.061:37047): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335851 suid=74 rport=55030 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997429.062:37048): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335851 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997429.064:37049): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335850 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997429.064:37050): pid=335850 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="(unknown)" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997429.139:37051): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997429.162:37052): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997429.162:37053): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997429.196:37054): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997429.197:37055): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=335998 suid=74 rport=59086 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997429.198:37056): pid=335997 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997429.198:37057): pid=335997 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=338 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1773997429.198:37057): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7ffed4c7acc0 a2=4 a3=3e8 items=0 ppid=38931 pid=335997 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=338 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997429.198:37057): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997429.200:37058): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_START msg=audit(1773997429.235:37059): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997429.237:37060): pid=336032 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336032 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1773997429.239:37061): pid=336032 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1773997429.284:37062): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1773997429.284:37063): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997429.288:37064): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336043 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1773997429.359:37065): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1773997429.360:37066): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=2F62696E2F7368202D63206563686F204245434F4D452D535543434553532D74756D6A65626C707762637766666978746C677574746A7167616366636F7865203B202F7573722F62696E2F707974686F6E33 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1773997429.361:37067): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1773997429.366:37068): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1773997429.878:37069): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_DISP msg=audit(1773997429.878:37070): pid=336063 uid=1000 auid=1000 ses=338 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_END msg=audit(1773997429.882:37071): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_LOGOUT msg=audit(1773997429.882:37072): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=SERVICE_START msg=audit(1773997430.633:37073): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997430.782:37074): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=681dfaaa80b91c6e52279d5cb7cc18843b4b88a2ec2724b6271a385913380eef comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997432.514:37075): pid=336426 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336426 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997432.526:37076): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=336426 suid=74 rport=37070 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997432.526:37077): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=336426 suid=74 rport=37070 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=SERVICE_START msg=audit(1773997432.627:37078): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997432.628:37079): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997432.870:37080): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e509f05f31839151997005205f6a2ad293491cd26e1ec95b52d1285318c9453d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997435.312:37081): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336032 suid=1000 rport=59086 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997435.313:37082): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336032 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_END msg=audit(1773997435.317:37083): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_close grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRED_DISP msg=audit(1773997435.318:37084): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997435.318:37085): pid=335997 uid=0 auid=1000 ses=338 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=335997 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=SERVICE_START msg=audit(1773997435.347:37086): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997435.352:37087): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997435.356:37088): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997435.360:37089): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997435.523:37090): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=9671c7334d6f97fbd9be8ff4f0acd6d927c36f1c55fa1dbafa2bece022174e23 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997435.589:37091): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8af18273635cb9f30f99676eb8d90a0896d1347c54def7cf3c9dff6bf9e75b24 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997435.697:37092): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=6de4848c114ed0a8429f437c0188fa70e8009b8f6c0ce50f9ee5785719a7e4a1 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997435.721:37093): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ba136805c9c4c6ec95264928430f01142934d45a29b5b92ac1689b974c6d8966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997436.252:37094): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336426 suid=74 rport=37070 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997436.253:37095): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336426 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997436.254:37096): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336425 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997436.254:37097): pid=336425 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997436.630:37098): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997436.879:37099): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f807a5db737a93a6c710a647ea7ba9fec81a4992c81ca0f2ba0ae100aeb64897 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997439.235:37100): pid=336770 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336770 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997439.249:37101): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=336770 suid=74 rport=39984 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997439.250:37102): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=336770 suid=74 rport=39984 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997439.364:37103): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="root" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.637:37104): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.641:37105): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.646:37106): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.651:37107): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.655:37108): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.661:37109): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.665:37110): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.668:37111): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997439.673:37112): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997439.969:37113): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8646d1ca816830745add2c08b6313a0ed4d4346b204b7c5554e8f31376059b95 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997439.984:37114): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=778377171d956b0595b3712bb30f5e7e3dee02e99ef43de0d3b82fd40625fec7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.070:37115): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=3c2de3075d5deedc8729ad1cb8116712e418820256234c1ccdeff75691076206 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997440.081:37116): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.087:37117): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a3cecfe22f44b8bb17615adcc671c986b29839528df740b7ee3ae0192a8c720a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.094:37118): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d657f1ac16a703b49ada27412092bc5c244224bfa2708fa0ee6b62a203d94b16 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.125:37119): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=8562e3fa957221cd9ae27efefe3774bcd91fbed01fd569de26788d711b38e872 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.136:37120): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=1607cd8c8c4085afb6cab62711fa57f315b7aa874d34b581b2a6b1fb00dcc175 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.181:37121): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=f614c28e296f8d57356ec86b0f22a70c7b49f140747d6660b491c1f879f4d89d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.419:37122): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7b84e67ebc36bc305a911266e3d672350fa88cfdf6189570ddbe146ac66743de comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997440.521:37123): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=91d3f81871816bc1c04985edbc5c1094a0fff5320b14210a61fb380a16c0c006 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997441.172:37124): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=336770 suid=74 rport=39984 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997441.173:37125): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336770 suid=74  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_KEY_USER msg=audit(1773997441.175:37126): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=336769 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=USER_LOGIN msg=audit(1773997441.175:37127): pid=336769 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login acct="root" exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.633:37128): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.638:37129): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.642:37130): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.647:37131): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.650:37132): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.654:37133): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.658:37134): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.662:37135): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.666:37136): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.669:37137): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997443.801:37138): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997443.911:37139): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=e23abbc5376e7ca24baacdab4610948ea1abd996aeffc08a8d50bcd052759683 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997443.933:37140): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d8c76a3ab6efbc00376f6779bd1ba794923edd70bbc400414f813057367fdc9a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.003:37141): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5ede24c2e644d8181f55b7f0b11cdbee835eec9acf16741900bf5593937e8c8d comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.013:37142): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=5dbf758baf124a0f1d31ddf1669cac6e76f05399d3f01e301f6197b879b626fc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.074:37143): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=d72715ffbad2cecf66b3f1da49003d2dafd8608f04635c12306aa0f377c72a89 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.232:37144): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=4fe5b7fa48ad6902be8207519533f7e82eaab6d085e2175572282ddaa79b0710 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.238:37145): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=059872aa01cc715cc78e6659e079b19b81575b6f985e82df0bb648e6baa81e19 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.277:37146): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=a18c1666727082fee9f17efa354364fa3bac8f69d56e301399e269bb7ffe930a comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.328:37147): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=11109ae812aa466b654aef8d48e0eb831ba5953be1550130e01f27ab6a75a1f5 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.384:37148): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=254076e8b7716a0bde1356106ccad93361ea837a029d9801cccc44646ff06314 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997444.419:37149): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=67d93145f8771a7f8a1e1b00c1ab8356e7e742efdca8e94e9317396d19200bb7 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997445.626:37150): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997446.075:37151): pid=337716 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=337716 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997446.086:37152): pid=337715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=337716 suid=74 rport=39992 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997446.086:37153): pid=337715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=aes128-gcm@openssh.com ksize=128 mac=<implicit> pfs=curve25519-sha256 spid=337716 suid=74 rport=39992 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=147.182.129.34 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997446.166:37154): pid=337715 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:authentication grantors=? acct="odoo" exe="/usr/sbin/sshd" hostname=147.182.129.34 addr=147.182.129.34 terminal=ssh res=failed'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997447.452:37155): pid=337808 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=337808 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" SUID="root"
type=CRYPTO_SESSION msg=audit(1773997447.454:37156): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-server cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337808 suid=74 rport=42550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRYPTO_SESSION msg=audit(1773997447.455:37157): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=start direction=from-client cipher=chacha20-poly1305@openssh.com ksize=512 mac=<implicit> pfs=curve25519-sha256 spid=337808 suid=74 rport=42550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=USER_AUTH msg=audit(1773997447.536:37158): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=failed'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997447.537:37159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997447.542:37160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_AUTH msg=audit(1773997447.561:37161): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=pubkey_auth grantors=auth-key acct="zuul" exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997447.561:37162): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=negotiate kind=auth-key fp=SHA256:ff:30:e4:26:93:3b:d1:ea:4d:cd:0f:b4:ce:8b:bb:c0:6d:b8:64:0f:48:63:1f:1d:54:07:49:d4:0d:9e:fc:da exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset"
type=USER_ACCT msg=audit(1773997447.593:37163): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=CRYPTO_KEY_USER msg=audit(1773997447.594:37164): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=session fp=? direction=both spid=337808 suid=74 rport=42550 laddr=38.102.83.147 lport=22  exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=? res=success'UID="root" AUID="unset" SUID="sshd"
type=CRED_ACQ msg=audit(1773997447.596:37165): pid=337805 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997447.596:37166): pid=337805 uid=0 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=339 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1773997447.596:37166): arch=c000003e syscall=1 success=yes exit=4 a0=3 a1=7fff1ad09420 a2=4 a3=3e8 items=0 ppid=38931 pid=337805 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=339 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997447.596:37166): proctitle=737368643A207A75756C205B707269765D
type=USER_ROLE_CHANGE msg=audit(1773997447.598:37167): pid=337805 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_ACCT msg=audit(1773997447.667:37168): pid=337835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=CRED_ACQ msg=audit(1773997447.667:37169): pid=337835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:setcred grantors=? acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed'UID="root" AUID="unset"
type=USER_ROLE_CHANGE msg=audit(1773997447.668:37170): pid=337835 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=LOGIN msg=audit(1773997447.668:37171): pid=337835 uid=0 subj=system_u:system_r:init_t:s0 old-auid=4294967295 auid=1000 tty=(none) old-ses=4294967295 ses=340 res=1UID="root" OLD-AUID="unset" AUID="zuul"
type=SYSCALL msg=audit(1773997447.668:37171): arch=c000003e syscall=1 success=yes exit=4 a0=9 a1=7ffff88d1970 a2=4 a3=3e8 items=0 ppid=1 pid=337835 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=340 comm="(systemd)" exe="/usr/lib/systemd/systemd" subj=system_u:system_r:init_t:s0 key=(null)ARCH=x86_64 SYSCALL=write AUID="zuul" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=PROCTITLE msg=audit(1773997447.668:37171): proctitle="(systemd)"
type=USER_START msg=audit(1773997447.672:37172): pid=337835 uid=0 auid=1000 ses=340 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="zuul" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul"
type=SERVICE_STOP msg=audit(1773997447.755:37173): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=ddf3a9a2bf9265b58d23ada673910594acb96b933a91326d21d23a47b80fc0fa comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_STOP msg=audit(1773997447.810:37174): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=7350219c4bec1e61093c14d7fca1cadefdb98c69a804e79edd8f54b5f808cef6 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=SERVICE_START msg=audit(1773997447.916:37175): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@1000 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
type=USER_START msg=audit(1773997447.953:37176): pid=337805 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_namespace,pam_keyinit,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_umask,pam_lastlog acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997447.955:37177): pid=337893 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=337893 suid=0  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="root"
type=CRED_ACQ msg=audit(1773997447.958:37178): pid=337893 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="zuul" exe="/usr/sbin/sshd" hostname=38.102.83.114 addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul"
type=USER_LOGIN msg=audit(1773997448.004:37179): pid=337805 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=USER_START msg=audit(1773997448.004:37180): pid=337805 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=login id=1000 exe="/usr/sbin/sshd" hostname=? addr=38.102.83.114 terminal=ssh res=success'UID="root" AUID="zuul" ID="zuul"
type=CRYPTO_KEY_USER msg=audit(1773997448.006:37181): pid=337805 uid=0 auid=1000 ses=339 subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 msg='op=destroy kind=server fp=SHA256:77:27:8e:ee:b5:d7:1a:6c:b3:42:b0:85:ef:c8:9b:21:46:ad:07:65:23:19:0a:35:3b:da:da:6e:d0:c5:53:27 direction=? spid=337898 suid=1000  exe="/usr/sbin/sshd" hostname=? addr=? terminal=? res=success'UID="root" AUID="zuul" SUID="zuul"
type=USER_ACCT msg=audit(1773997448.064:37182): pid=337898 uid=1000 auid=1000 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="zuul" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_CMD msg=audit(1773997448.066:37183): pid=337898 uid=1000 auid=1000 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/zuul" cmd=7273796E63202D2D736572766572202D2D73656E646572202D6C4C6F67447470727A652E4C73667843202E202F7661722F6C6F67 exe="/usr/bin/sudo" terminal=? res=success'UID="zuul" AUID="zuul"
type=CRED_REFR msg=audit(1773997448.069:37184): pid=337898 uid=1000 auid=1000 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:setcred grantors=pam_env,pam_localuser,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"
type=USER_START msg=audit(1773997448.074:37185): pid=337898 uid=1000 auid=1000 ses=339 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_limits,pam_systemd,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'UID="zuul" AUID="zuul"